-

CVE-2026-80801

Medienbericht

nfc: microread: validate target discovery payload lengths

In the Linux kernel, the following vulnerability has been resolved:

nfc: microread: validate target discovery payload lengths

microread_target_discovered() parses target discovery payloads from
skb->data according to the HCI gate. The fixed field offsets and UID
copies were checked only against the destination nfc_target buffers, not
against the actual skb length.

Validate that each gate-specific payload contains the fixed fields and
UID bytes before reading or copying them.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version cfad1ba87150e198be9ea32367a24e500e59de2c
Version < c6de4241f2efbbab286efbb84a9c7190298b3052
Status affected
Version cfad1ba87150e198be9ea32367a24e500e59de2c
Version < 92a6f0201bb68391b5eba1b3f330af007d7323b6
Status affected
Version cfad1ba87150e198be9ea32367a24e500e59de2c
Version < cb298672282421159e53ab311fe49d204c8a52da
Status affected
Version cfad1ba87150e198be9ea32367a24e500e59de2c
Version < 18f02354ed229b8e4561b580812d026e7eb29c85
Status affected
Version cfad1ba87150e198be9ea32367a24e500e59de2c
Version < e6397fe7b8b5ef18e051f49612d40ff476c5f7d9
Status affected
Version cfad1ba87150e198be9ea32367a24e500e59de2c
Version < d0902a7c454326c6384c614226ab8987f3fd425d
Status affected
Version cfad1ba87150e198be9ea32367a24e500e59de2c
Version < dabfa26a208e56f4d8dbf26fddc48f188bdb0649
Status affected
Version cfad1ba87150e198be9ea32367a24e500e59de2c
Version < 953963b9ac5eecbb316617d337bfaa3d731e3c5e
Status affected
Version cfad1ba87150e198be9ea32367a24e500e59de2c
Version < 25519469972ef57c3edb1805dabd6c5612b90211
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 3.9
Status affected
Version 0
Version < 3.9
Status unaffected
Version <= 5.10.*
Version 5.10.267
Status unaffected
Version <= 5.15.*
Version 5.15.218
Status unaffected
Version <= 6.1.*
Version 6.1.185
Status unaffected
Version <= 6.6.*
Version 6.6.154
Status unaffected
Version <= 6.12.*
Version 6.12.106
Status unaffected
Version <= 6.18.*
Version 6.18.47
Status unaffected
Version <= 7.1.*
Version 7.1.11
Status unaffected
Version <= 7.2.*
Version 7.2.1
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.093
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
08.09.2026 20:38
https://git.kernel.org/stable/c/c6de4241f2efbbab286efbb84a9c7190298b3052
https://git.kernel.org/stable/c/92a6f0201bb68391b5eba1b3f330af007d7323b6
https://git.kernel.org/stable/c/cb298672282421159e53ab311fe49d204c8a52da
https://git.kernel.org/stable/c/18f02354ed229b8e4561b580812d026e7eb29c85
https://git.kernel.org/stable/c/e6397fe7b8b5ef18e051f49612d40ff476c5f7d9
https://git.kernel.org/stable/c/d0902a7c454326c6384c614226ab8987f3fd425d
https://git.kernel.org/stable/c/dabfa26a208e56f4d8dbf26fddc48f188bdb0649
https://git.kernel.org/stable/c/953963b9ac5eecbb316617d337bfaa3d731e3c5e
https://git.kernel.org/stable/c/25519469972ef57c3edb1805dabd6c5612b90211