CVE-2026-80803

Not scored yetLast modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

nfc: digital: clamp SENSF_RES length to the destination buffer

digital_in_recv_sensf_res() memcpy()s resp->len bytes from a remote NFC-F device response into the NFC_SENSF_RES_MAXSIZE-byte target.sensf_res field without an upper-bound check. A nearby malicious NFC-F device can send an oversized SENSF_RES response to overflow the stack-local struct nfc_target.

Clamp resp->len to NFC_SENSF_RES_MAXSIZE before the copy.

Found by 0sec automated security-research tooling (https://0sec.ai).

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 8c0695e4998dd268ff2a05951961247b7e015651, < 6afb29751ee731e7f7a96feb8a15f91441e552ba; >= 8c0695e4998dd268ff2a05951961247b7e015651, < e886c63d2ca7108826076989103a1ffa8a0bb8f4; >= 8c0695e4998dd268ff2a05951961247b7e015651, < 4e942da2869bcd646353eef706b7dd82efeb9db5; >= 8c0695e4998dd268ff2a05951961247b7e015651, < d0756a98277e383c26fead988a96c91f0781cd7f; >= 8c0695e4998dd268ff2a05951961247b7e015651, < af4c0606f743e009254a8d252096855335ade85d; >= 8c0695e4998dd268ff2a05951961247b7e015651, < a56773e649ea99b344d6bbaf90f34c8e3fadef5d; >= 8c0695e4998dd268ff2a05951961247b7e015651, < a1ef9bddfbb3ae42b036c5aa16cf386d78db70b6; >= 8c0695e4998dd268ff2a05951961247b7e015651, < 31aa28ed732f66ab83c40ef53d99791be69b85c4; >= 8c0695e4998dd268ff2a05951961247b7e015651, < 344a56d7c8e0f3cbaff0bcb1bcd95a1a1db24b16
LinuxLinux3.13

References

Timeline

Published
Sep 4, 2026
Last modified
Oct 19, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-80804In the Linux kernel, the following vulnerability has been resolved: xfs: restore nofs context unconditionally in xfs_trans_roll When __xfsCVE-2026-80805In the Linux kernel, the following vulnerability has been resolved: xfs: validate attr entry pointer before field access xfs_attr3_leaf_veCVE-2026-80806In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new enCVE-2026-80807In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject invalid block index in GC ioctl Syzbot reported list coCVE-2026-80808In the Linux kernel, the following vulnerability has been resolved: ext4: stop retrying saturated xattr cache entries ext4_xattr_block_setCVE-2026-80809In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix missing metadata reservation for large xattrs [BUG] lsetxatCVE-2026-80816.3A vulnerability has been found in router-for-me CLIProxyAPI 6.9.29. Affected by this issue is some unknown functionality of the file internaCVE-2026-80810In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: fix folio size overflow in io_vec_fill_bvec() io_vec_fiCVE-2026-80812In the Linux kernel, the following vulnerability has been resolved: ALSA: dummy: Check card index validity at probe snd_dummy_probe() blinCVE-2026-80813In the Linux kernel, the following vulnerability has been resolved: nvmet: fix NULL pointer dereference in nvmet_execute_identify_nslist() CVE-2026-80814In the Linux kernel, the following vulnerability has been resolved: rndis_host: add overflow check in rndis_rx_fixup() Add an overflow cheCVE-2026-80815In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Use a private URB for the notification endpoint scarl