CVE-2026-80801

Not scored yetLast modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

nfc: microread: validate target discovery payload lengths

microread_target_discovered() parses target discovery payloads from skb->data according to the HCI gate. The fixed field offsets and UID copies were checked only against the destination nfc_target buffers, not against the actual skb length.

Validate that each gate-specific payload contains the fixed fields and UID bytes before reading or copying them.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= cfad1ba87150e198be9ea32367a24e500e59de2c, < c6de4241f2efbbab286efbb84a9c7190298b3052; >= cfad1ba87150e198be9ea32367a24e500e59de2c, < 92a6f0201bb68391b5eba1b3f330af007d7323b6; >= cfad1ba87150e198be9ea32367a24e500e59de2c, < cb298672282421159e53ab311fe49d204c8a52da; >= cfad1ba87150e198be9ea32367a24e500e59de2c, < 18f02354ed229b8e4561b580812d026e7eb29c85; >= cfad1ba87150e198be9ea32367a24e500e59de2c, < e6397fe7b8b5ef18e051f49612d40ff476c5f7d9; >= cfad1ba87150e198be9ea32367a24e500e59de2c, < d0902a7c454326c6384c614226ab8987f3fd425d; >= cfad1ba87150e198be9ea32367a24e500e59de2c, < dabfa26a208e56f4d8dbf26fddc48f188bdb0649; >= cfad1ba87150e198be9ea32367a24e500e59de2c, < 953963b9ac5eecbb316617d337bfaa3d731e3c5e; >= cfad1ba87150e198be9ea32367a24e500e59de2c, < 25519469972ef57c3edb1805dabd6c5612b90211
LinuxLinux3.9

References

Timeline

Published
Sep 4, 2026
Last modified
Oct 19, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-80802In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: bound the device-reported read length and fix an skb leak fdCVE-2026-80803In the Linux kernel, the following vulnerability has been resolved: nfc: digital: clamp SENSF_RES length to the destination buffer digitalCVE-2026-80804In the Linux kernel, the following vulnerability has been resolved: xfs: restore nofs context unconditionally in xfs_trans_roll When __xfsCVE-2026-80805In the Linux kernel, the following vulnerability has been resolved: xfs: validate attr entry pointer before field access xfs_attr3_leaf_veCVE-2026-80806In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new enCVE-2026-80807In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject invalid block index in GC ioctl Syzbot reported list coCVE-2026-80808In the Linux kernel, the following vulnerability has been resolved: ext4: stop retrying saturated xattr cache entries ext4_xattr_block_setCVE-2026-80809In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix missing metadata reservation for large xattrs [BUG] lsetxatCVE-2026-80816.3A vulnerability has been found in router-for-me CLIProxyAPI 6.9.29. Affected by this issue is some unknown functionality of the file internaCVE-2026-80810In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: fix folio size overflow in io_vec_fill_bvec() io_vec_fiCVE-2026-80812In the Linux kernel, the following vulnerability has been resolved: ALSA: dummy: Check card index validity at probe snd_dummy_probe() blinCVE-2026-80813In the Linux kernel, the following vulnerability has been resolved: nvmet: fix NULL pointer dereference in nvmet_execute_identify_nslist()
CVE-2026-80801: Unscored | Vulnix