CVE-2026-80803

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: nfc: digital: clamp SENSF_RES length to the destination buffer digital_in_recv_sensf_res() memcpy()s resp->len bytes from a remote NFC-F device response into the NFC_SENSF_RES_MAXSIZE-byte target.sensf_res field without an upper-bound check. A nearby malicious NFC-F device can send an oversized SENSF_RES response to overflow the stack-local struct nfc_target. Clamp resp->len to NFC_SENSF_RES_MAXSIZE before the copy. Found by 0sec automated security-research tooling (https://0sec.ai).

SeverityUnknown

CVSS—

Exploit probability—

Product

Linux

PublishedSep 4, 2026

First seenSep 4, 2026

How to fix

Update

Linux Linux6afb29751ee731e7f7a96feb8a15f91441e552ba, e886c63d2ca7108826076989103a1ffa8a0bb8f4, 4e942da2869bcd646353eef706b7dd82efeb9db5, d0756a98277e383c26fead988a96c91f0781cd7f, af4c0606f743e009254a8d252096855335ade85d, a56773e649ea99b344d6bbaf90f34c8e3fadef5d, a1ef9bddfbb3ae42b036c5aa16cf386d78db70b6, 31aa28ed732f66ab83c40ef53d99791be69b85c4, 344a56d7c8e0f3cbaff0bcb1bcd95a1a1db24b16 or later

Affected products

Product	Affected versions	Fixed in
Linux Linux	8c0695e4998dd268ff2a05951961247b7e015651 ≤ v < 6afb29751ee731e7f7a96feb8a15f91441e552ba, 8c0695e4998dd268ff2a05951961247b7e015651 ≤ v < e886c63d2ca7108826076989103a1ffa8a0bb8f4, 8c0695e4998dd268ff2a05951961247b7e015651 ≤ v < 4e942da2869bcd646353eef706b7dd82efeb9db5, 8c0695e4998dd268ff2a05951961247b7e015651 ≤ v < d0756a98277e383c26fead988a96c91f0781cd7f, 8c0695e4998dd268ff2a05951961247b7e015651 ≤ v < af4c0606f743e009254a8d252096855335ade85d, 8c0695e4998dd268ff2a05951961247b7e015651 ≤ v < a56773e649ea99b344d6bbaf90f34c8e3fadef5d, 8c0695e4998dd268ff2a05951961247b7e015651 ≤ v < a1ef9bddfbb3ae42b036c5aa16cf386d78db70b6, 8c0695e4998dd268ff2a05951961247b7e015651 ≤ v < 31aa28ed732f66ab83c40ef53d99791be69b85c4, 8c0695e4998dd268ff2a05951961247b7e015651 ≤ v < 344a56d7c8e0f3cbaff0bcb1bcd95a1a1db24b16, 3.13	6afb29751ee731e7f7a96feb8a15f91441e552ba, e886c63d2ca7108826076989103a1ffa8a0bb8f4, 4e942da2869bcd646353eef706b7dd82efeb9db5, d0756a98277e383c26fead988a96c91f0781cd7f, af4c0606f743e009254a8d252096855335ade85d, a56773e649ea99b344d6bbaf90f34c8e3fadef5d, a1ef9bddfbb3ae42b036c5aa16cf386d78db70b6, 31aa28ed732f66ab83c40ef53d99791be69b85c4, 344a56d7c8e0f3cbaff0bcb1bcd95a1a1db24b16

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.