From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from ixit.cz (ixit.cz [185.100.197.86]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id DA6B1364E99 for ; Fri, 17 Apr 2026 08:12:31 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=185.100.197.86 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1776413553; cv=none; b=oQOSO0eR7cnRxqq+7k8f6SAmzbRUBlmk7+FXyCrTeT/V8Ec5/NS8FFaCmFTZlCWV+mYAMBi7bW+Fn0ptjTcEOc/2Ert1kLPSbvztvn2J7kLCHs4gSBODyvQyOp9zHML38FCPC8G2Pg5zos7lhfubDke5LTyE0YwZYCMvHJhG9Qg= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1776413553; c=relaxed/simple; bh=5aZEKshDOXRidn3Y/BdY7lEfvzBOAQ5uSjPCGVUka5E=; h=Message-ID:Date:MIME-Version:Subject:To:Cc:References:From: In-Reply-To:Content-Type; b=gouJYPkfD8tWHw0nGfSVxmFCPoxO6+p4V3ALesj88N1jzaCORWsssMJTHYufE9Xsr5Yudu6x20UHJPT86yTdDh21ueWElBStnmDxfDKYgyCnQbI8+t1gLQ7dGONTZJgMpS3yiSQHTtZ6ty7rZfAIjtn1PbbPtWLQCLU1wZKJQ+I= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=ixit.cz; spf=pass smtp.mailfrom=ixit.cz; dkim=pass (1024-bit key) header.d=ixit.cz header.i=@ixit.cz header.b=wFlWH7Kp; arc=none smtp.client-ip=185.100.197.86 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=ixit.cz Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=ixit.cz Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=ixit.cz header.i=@ixit.cz header.b="wFlWH7Kp" Received: from [192.168.10.152] (unknown [212.20.115.61]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange x25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ixit.cz (Postfix) with ESMTPSA id 2DB735340124; Fri, 17 Apr 2026 10:12:23 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ixit.cz; s=dkim; t=1776413543; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:autocrypt:autocrypt; bh=tEWdsqsb8wkUZAlYHIC3tvioIoXhJCCGYRYEei4EofE=; b=wFlWH7Kpyk1JZQBuZq5O/5HcnqwWlBO5kKowhoL5305D3+jna2Y186hGuOAngKzHE+3JXV WIHhhHOYIvavYRR6cGYya/Y1bvQ9vWw84PdR78A/wEMtRwwN1kTPuJDNmLQXD3uzqbPbmJ 6Pix3RrzMxc1r+Gju3P0AesONzcWC74= Message-ID: <1725ea8d-ac1f-49d2-8d8c-2e09721454c2@ixit.cz> Date: Fri, 17 Apr 2026 10:12:22 +0200 Precedence: bulk X-Mailing-List: netdev@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: Path forward for NFC in the kernel To: Krzysztof Kozlowski , Jakub Kicinski , Michael Thalmeier , Raymond Hackley , Michael Walle , Bongsu Jeon , Mark Greer Cc: netdev@vger.kernel.org References: <20260416101041.4c533306@kernel.org> <9c4a4acf-b4f1-4e84-93bf-cdf080cb9970@kernel.org> Content-Language: en-US From: David Heidelberg Autocrypt: addr=david@ixit.cz; keydata= xsFNBF5v1x4BEADS3EddwsNsvVAI1XF8uQKbdYPY/GhjaSLziwVnbwv5BGwqB1tfXoHnccoA 9kTgKAbiXG/CiZFhD6l4WCIskQDKzyQN3JhCUIxh16Xyw0lECI7iqoW9LmMoN1dNKcUmCO9g lZxQaOl+1bY/7ttd7DapLh9rmBXJ2lKiMEaIpUwb/Nw0d7Enp4Jy2TpkhPywIpUn8CoJCv3/ 61qbvI9y5utB/UhfMAUXsaAgwEJyGPAqHlC0YZjaTwOu+YQUE3AFzhCbksq95CwDz4U4gdls dmv9tkATfu2OmzERZQ6vJTehK0Pu4l5KmCAzYg42I9Dy4E6b17x6NncKbcByQFOXMtG0qVUk F1yeeOQUHwu+8t3ZDMBUhCkRL/juuoqLmyDWKMc0hKNNeZ9BNXgB8fXkRLWEUfgDXsFyEkKp NxUy5bDRlivf6XfExnikk5kj9l2gGlNQwqROti/46bfbmlmc/a2GM4k8ZyalHNEAdwtXYSpP 8JJmlbQ7hNTLkc3HQLRsIocN5th/ur7pPMz1Beyp0gbE9GcOceqmdZQB80vJ01XDyCAihf6l AMnzwpXZsjqIqH9r7T7tM6tVEVbPSwPt4eZYXSoJijEBC/43TBbmxDX+5+3txRaSCRQrG9dY k3mMGM3xJLCps2KnaqMcgUnvb1KdTgEFUZQaItw7HyRd6RppewARAQABzSBEYXZpZCBIZWlk ZWxiZXJnIDxkYXZpZEBpeGl0LmN6PsLBlAQTAQgAPgIbAwULCQgHAgYVCgkICwIEFgIDAQIe AQIXgBYhBNd6Cc/u3Cu9U6cEdGACP8TTSSByBQJl+KksBQkPDaAOAAoJEGACP8TTSSBy6IAQ AMqFqVi9LLxCEcUWBn82ssQGiVSDniKpFE/tp7lMXflwhjD5xoftoWOmMYkiWE86t5x5Fsp7 afALx7SEDz599F1K1bLnaga+budu55JEAYGudD2WwpLJ0kPzRhqBwGFIx8k6F+goZJzxPDsf loAtXQE62UvEKa4KRRcZmF0GGoRsgA7vE7OnV8LMeocdD3eb2CuXLzauHAfdvqF50IfPH/sE jbzROiAZU+WgrwU946aOzrN8jVU+Cy8XAccGAZxsmPBfhTY5f2VN1IqvfaRdkKKlmWVJWGw+ ycFpAEJKFRdfcc5PSjUJcALn5C+hxzL2hBpIZJdfdfStn+DWHXNgBeRDiZj1x6vvyaC43RAb VXvRzOQfG4EaMVMIOvBjBA/FtIpb1gtXA42ewhvPnd5RVCqD9YYUxsVpJ9d+XsAy7uib3BsV W2idAEsPtoqhVhq8bCUs/G4sC2DdyGZK8MRFDJqciJSUbqA+5z1ZCuE8UOPDpZKiW6H/OuOM zDcjh0lOzr4p+/1TSg1PbUh7fQ+nbMuiT044sC1lLtJK0+Zyn0GwhR82oNM4fldNsaHRW42w QGD35+eNo5Pvb3We5XRMlBdhFnj7Siggp4J8/PJ6MJvRyC+RIJPGtbdMB2/RxWunFLn87e5w UgwR9jPMHAstuTR1yR23c4SIYoQ2fzkrRzuazsFNBF5v1x4BEADnlrbta2WL87BlEOotZUh0 zXANMrNV15WxexsirLetfqbs0AGCaTRNj+uWlTUDJRXOVIwzmF76Us3I2796+Od2ocNpLheZ 7EIkq8budtLVd1c06qJ+GMraz51zfgSIazVInNMPk9T6fz0lembji5yEcNPNNBA4sHiFmXfo IhepHFOBApjS0CiOPqowYxSTPe/DLcJ/LDwWpTi37doKPhBwlHev1BwVCbrLEIFjY0MLM0aT jiBBlyLJaTqvE48gblonu2SGaNmGtkC3VoQUQFcVYDXtlL9CVbNo7BAt5gwPcNqEqkUL60Jh FtvVSKyQh6gn7HHsyMtgltjZ3NKjv8S3yQd7zxvCn79tCKwoeNevsvoMq/bzlKxc9QiKaRPO aDj3FtW7R/3XoKJBY8Hckyug6uc2qYWRpnuXc0as6S0wfek6gauExUttBKrtSbPPHiuTeNHt NsT4+dyvaJtQKPBTbPHkXpTO8e1+YAg7kPj3aKFToE/dakIh8iqUHLNxywDAamRVn8Ha67WO AEAA3iklJ49QQk2ZyS1RJ2Ul28ePFDZ3QSr9LoJiOBZv9XkbhXS164iRB7rBZk6ZRVgCz3V6 hhhjkipYvpJ/fpjXNsVL8jvel1mYNf0a46T4QQDQx4KQj0zXJbC2fFikAtu1AULktF4iEXEI rSjFoqhd4euZ+QARAQABwsF8BBgBCAAmAhsMFiEE13oJz+7cK71TpwR0YAI/xNNJIHIFAmX4 qVAFCQ8NoDIACgkQYAI/xNNJIHKN4A/+Ine2Ii7JiuGITjJkcV6pgKlfwYdEs4eFD1pTRb/K 5dprUz3QSLP41u9OJQ23HnESMvn31UENk9ffebNoW7WxZ/8cTQY0JY/cgTTrlNXtyAlGbR3/ 3Q/VBJptf04Er7I6TaKAmqWzdVeKTw33LljpkHp02vrbOdylb4JQG/SginLV9purGAFptYRO 8JNa2J4FAQtQTrfOUjulOWMxy7XRkqK3QqLcPW79/CFn7q1yxamPkpoXUJq9/fVjlhk7P+da NYQpe4WQQnktBY29SkFnvfIAwqIVU8ix5Oz8rghuCcAdR7lEJ7hCX9bR0EE05FOXdZy5FWL9 GHvFa/Opkq3DPmFl/0nt4HJqq1Nwrr+WR6d0414oo1n2hPEllge/6iD3ZYwptTvOFKEw/v0A yqOoYSiKX9F7Ko7QO+VnYeVDsDDevKic2T/4GDpcSVd9ipiKxCQvUAzKUH7RUpqDTa+rYurm zRKcgRumz2Tc1ouHj6qINlzEe3a5ldctIn/dvR1l2Ko7GBTG+VGp9U5NOAEkGpxHG9yg6eeY fFYnMme51H/HKiyUlFiE3yd5LSmv8Dhbf+vsI4x6BOOOq4Iyop/Exavj1owGxW0hpdUGcCl1 ovlwVPO/6l/XLAmSGwdnGqok5eGZQzSst0tj9RC9O0dXO1TZocOsf0tJ8dR2egX4kxM= In-Reply-To: <9c4a4acf-b4f1-4e84-93bf-cdf080cb9970@kernel.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit On 17/04/2026 09:18, Krzysztof Kozlowski wrote: > On 16/04/2026 19:10, Jakub Kicinski wrote: >> Hi folks! >> >> We are struggling to keep up with the number of security reports and AI >> generated patches in the kernel. NFC is infamous for being a huge CVE >> magnet. We need someone to step up as a maintainer, create an NFC tree >> and handle all the incoming submissions. Send us (or Linus if you >> prefer) periodic PRs, like WiFi, Bluetooth etc. do. If that does not >> happen I'm afraid we'll have to move the NFC code out of the tree, >> put it up on GH or some such, and let it accumulate CVEs there.. >> >> I'm planning to send a PR to Linus to shed the unmaintained code early >> next week. We need to have a maintainer established by then. > > +Cc David Heidelberg recently trying to use Linux NFC stack, > > Just "collecting" patches is not a big deal, I could do this, but > actually reviewing the patches with necessary due diligence is the > effort I could not provide in a reasonable time frame. And picking up > patches without proper review feels risky... Hello Krzystof, Jakub, thanks for putting me into loop. I can do limited reviews and basic maintenance. My knowledge about NFC is for now somehow limited (but I'm willing to invest my limited time into learning more). As "I & LLM" wrote [1] userspace very basic reader for GNOME and planning to do more tight integration into GNOME, so would make sense to keep the kernel stack alive. [1] https://gitlab.gnome.org/dh/gnfc/ > > NFC has a long history of issues, first mostly pointed out by syzbot but > now apparently by AI tools. The code base is quite old, with no major > improvements or testings happening but not in a way "oh, it's stable and > working like 'cp' command" but rather "no one knows how many bugs are on > top of each other and if it actually still works". > > Syzbot and AI reported bugs encourage random drive-by fixes by people > not testing the code, thus particular bug report might be fixed, but for > example NFC stops working and no one knows that. I think I could filter out nonsense, possibly with help of Sashiko [2]. [2] https://sashiko.dev/ > > Does anyone knows if the NFC stack/drivers actually works fine? Did > anyone test actual devices? Yes, nxp,pn553, nxp,pn557. Other people did also test on some phones with different tags (I currently have only one tag with vCARD loaded on it). David > > If not, then moving to Github would be even more reasonable. > > Another point is that AFAIU, most of real world devices, like > Android-based phones, don't use the Linux NFC stack but their custom > HAL/user-space based libraries and drivers. Some other non-Android > projects use libnfc userspace, which seems to be maintained only as > bugfix (https://github.com/nfc-tools/libnfc/commits/master/). > > Best regards, > Krzysztof