CVE-2026-80803
- Source
- https://cve.org/CVERecord?id=CVE-2026-80803
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80803.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-80803
- Downstream
- Published
- 2026-09-04T15:13:17.298Z
- Modified
- 2026-09-06T03:46:46.251804954Z
- Summary
- nfc: digital: clamp SENSF_RES length to the destination buffer
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
nfc: digital: clamp SENSF_RES length to the destination buffer
digitalinrecvsensfres() memcpy()s resp->len bytes from a remote NFC-F device response into the NFCSENSFRESMAXSIZE-byte target.sensfres field without an upper-bound check. A nearby malicious NFC-F device can send an oversized SENSFRES response to overflow the stack-local struct nfctarget.
Clamp resp->len to NFCSENSFRES_MAXSIZE before the copy.
Found by 0sec automated security-research tooling (https://0sec.ai).
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80803.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/31aa28ed732f66ab83c40ef53d99791be69b85c4
- https://git.kernel.org/stable/c/344a56d7c8e0f3cbaff0bcb1bcd95a1a1db24b16
- https://git.kernel.org/stable/c/4e942da2869bcd646353eef706b7dd82efeb9db5
- https://git.kernel.org/stable/c/6afb29751ee731e7f7a96feb8a15f91441e552ba
- https://git.kernel.org/stable/c/a1ef9bddfbb3ae42b036c5aa16cf386d78db70b6
- https://git.kernel.org/stable/c/a56773e649ea99b344d6bbaf90f34c8e3fadef5d
- https://git.kernel.org/stable/c/af4c0606f743e009254a8d252096855335ade85d
- https://git.kernel.org/stable/c/d0756a98277e383c26fead988a96c91f0781cd7f
- https://git.kernel.org/stable/c/e886c63d2ca7108826076989103a1ffa8a0bb8f4
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80803.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-80803
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced8c0695e4998dd268ff2a05951961247b7e015651Fixed6afb29751ee731e7f7a96feb8a15f91441e552baFixede886c63d2ca7108826076989103a1ffa8a0bb8f4Fixed4e942da2869bcd646353eef706b7dd82efeb9db5Fixedd0756a98277e383c26fead988a96c91f0781cd7fFixedaf4c0606f743e009254a8d252096855335ade85dFixeda56773e649ea99b344d6bbaf90f34c8e3fadef5dFixeda1ef9bddfbb3ae42b036c5aa16cf386d78db70b6Fixed31aa28ed732f66ab83c40ef53d99791be69b85c4Fixed344a56d7c8e0f3cbaff0bcb1bcd95a1a1db24b16
Linux / Kernel
Package
- Name
- Kernel
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced3.13.0Fixed5.10.267
- Type
- ECOSYSTEM
- Events
-
Introduced5.11.0Fixed5.15.218
- Type
- ECOSYSTEM
- Events
-
Introduced5.16.0Fixed6.1.185
- Type
- ECOSYSTEM
- Events
-
Introduced6.2.0Fixed6.6.154
- Type
- ECOSYSTEM
- Events
-
Introduced6.7.0Fixed6.12.106
- Type
- ECOSYSTEM
- Events
-
Introduced6.13.0Fixed6.18.47
- Type
- ECOSYSTEM
- Events
-
Introduced6.19.0Fixed7.1.11
- Type
- ECOSYSTEM
- Events
-
Introduced7.2.0Fixed7.2.1