VDB

CVE-2026-80801

CVE-2026-80801 PUBLISHED

Reported by Linux · Published September 4, 2026

In the Linux kernel, the following vulnerability has been resolved: nfc: microread: validate target discovery payload lengths microread_target_discovered() parses target discovery payloads from skb->data according to the HCI gate. The fixed field offsets and UID copies were checked only against the destination nfc_target buffers, not against the actual skb length. Validate that each gate-specific payload contains the fixed fields and UID bytes before reading or copying them.

EPSS 0.19% · 9.5th percentile

Risk Scores

EPSS Score
0.19%
9.5th percentile

Affected Products

VendorProductVersions
LinuxLinuxcfad1ba87150e198be9ea32367a24e500e59de2c, cfad1ba87150e198be9ea32367a24e500e59de2c, cfad1ba87150e198be9ea32367a24e500e59de2c
LinuxLinux3.9, 0, 5.10.267
linuxlinux_kernel3.9, 3.9, 3.9
LinuxLinuxcfad1ba87150e198be9ea32367a24e500e59de2c, cfad1ba87150e198be9ea32367a24e500e59de2c, cfad1ba87150e198be9ea32367a24e500e59de2c

Timeline

  • Sep 4, 2026 Coalition ESS Score
  • Sep 4, 2026 CVE Published
  • Sep 5, 2026 EPSS Score
  • Sep 14, 2026 EPSS Score
  • Sep 17, 2026 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›