Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2026-80803 Details

Description

In the Linux kernel, the following vulnerability has been resolved: nfc: digital: clamp SENSF_RES length to the destination buffer digital_in_recv_sensf_res() memcpy()s resp->len bytes from a remote NFC-F device response into the NFC_SENSF_RES_MAXSIZE-byte target.sensf_res field without an upper-bound check. A nearby malicious NFC-F device can send an oversized SENSF_RES response to overflow the stack-local struct nfc_target. Clamp resp->len to NFC_SENSF_RES_MAXSIZE before the copy. Found by 0sec automated security-research tooling (https://0sec.ai).

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/31aa28ed732f66ab83c40ef53d99791be69b85c4	kernel.org
https://git.kernel.org/stable/c/344a56d7c8e0f3cbaff0bcb1bcd95a1a1db24b16	kernel.org
https://git.kernel.org/stable/c/4e942da2869bcd646353eef706b7dd82efeb9db5	kernel.org
https://git.kernel.org/stable/c/6afb29751ee731e7f7a96feb8a15f91441e552ba	kernel.org
https://git.kernel.org/stable/c/a1ef9bddfbb3ae42b036c5aa16cf386d78db70b6	kernel.org
https://git.kernel.org/stable/c/a56773e649ea99b344d6bbaf90f34c8e3fadef5d	kernel.org
https://git.kernel.org/stable/c/af4c0606f743e009254a8d252096855335ade85d	kernel.org
https://git.kernel.org/stable/c/d0756a98277e383c26fead988a96c91f0781cd7f	kernel.org
https://git.kernel.org/stable/c/e886c63d2ca7108826076989103a1ffa8a0bb8f4	kernel.org

see all 9 references

Weakness Enumeration

No weakness enumeration is available for this CVE.

Affected Products

No affected product data is available for this CVE.

Change History

1 change record found show changes