-

CVE-2026-80803

Medienbericht

nfc: digital: clamp SENSF_RES length to the destination buffer

In the Linux kernel, the following vulnerability has been resolved:

nfc: digital: clamp SENSF_RES length to the destination buffer

digital_in_recv_sensf_res() memcpy()s resp->len bytes from a remote
NFC-F device response into the NFC_SENSF_RES_MAXSIZE-byte target.sensf_res
field without an upper-bound check. A nearby malicious NFC-F device can
send an oversized SENSF_RES response to overflow the stack-local struct
nfc_target.

Clamp resp->len to NFC_SENSF_RES_MAXSIZE before the copy.

Found by 0sec automated security-research tooling (https://0sec.ai).
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 8c0695e4998dd268ff2a05951961247b7e015651
Version < 6afb29751ee731e7f7a96feb8a15f91441e552ba
Status affected
Version 8c0695e4998dd268ff2a05951961247b7e015651
Version < e886c63d2ca7108826076989103a1ffa8a0bb8f4
Status affected
Version 8c0695e4998dd268ff2a05951961247b7e015651
Version < 4e942da2869bcd646353eef706b7dd82efeb9db5
Status affected
Version 8c0695e4998dd268ff2a05951961247b7e015651
Version < d0756a98277e383c26fead988a96c91f0781cd7f
Status affected
Version 8c0695e4998dd268ff2a05951961247b7e015651
Version < af4c0606f743e009254a8d252096855335ade85d
Status affected
Version 8c0695e4998dd268ff2a05951961247b7e015651
Version < a56773e649ea99b344d6bbaf90f34c8e3fadef5d
Status affected
Version 8c0695e4998dd268ff2a05951961247b7e015651
Version < a1ef9bddfbb3ae42b036c5aa16cf386d78db70b6
Status affected
Version 8c0695e4998dd268ff2a05951961247b7e015651
Version < 31aa28ed732f66ab83c40ef53d99791be69b85c4
Status affected
Version 8c0695e4998dd268ff2a05951961247b7e015651
Version < 344a56d7c8e0f3cbaff0bcb1bcd95a1a1db24b16
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 3.13
Status affected
Version 0
Version < 3.13
Status unaffected
Version <= 5.10.*
Version 5.10.267
Status unaffected
Version <= 5.15.*
Version 5.15.218
Status unaffected
Version <= 6.1.*
Version 6.1.185
Status unaffected
Version <= 6.6.*
Version 6.6.154
Status unaffected
Version <= 6.12.*
Version 6.12.106
Status unaffected
Version <= 6.18.*
Version 6.18.47
Status unaffected
Version <= 7.1.*
Version 7.1.11
Status unaffected
Version <= 7.2.*
Version 7.2.1
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.093
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
08.09.2026 20:38
https://git.kernel.org/stable/c/6afb29751ee731e7f7a96feb8a15f91441e552ba
https://git.kernel.org/stable/c/e886c63d2ca7108826076989103a1ffa8a0bb8f4
https://git.kernel.org/stable/c/4e942da2869bcd646353eef706b7dd82efeb9db5
https://git.kernel.org/stable/c/d0756a98277e383c26fead988a96c91f0781cd7f
https://git.kernel.org/stable/c/af4c0606f743e009254a8d252096855335ade85d
https://git.kernel.org/stable/c/a56773e649ea99b344d6bbaf90f34c8e3fadef5d
https://git.kernel.org/stable/c/a1ef9bddfbb3ae42b036c5aa16cf386d78db70b6
https://git.kernel.org/stable/c/31aa28ed732f66ab83c40ef53d99791be69b85c4
https://git.kernel.org/stable/c/344a56d7c8e0f3cbaff0bcb1bcd95a1a1db24b16