« Volver al listado

CVE-2026-80803

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

nfc: digital: clamp SENSF_RES length to the destination buffer

digital_in_recv_sensf_res() memcpy()s resp->len bytes from a remote NFC-F device response into the NFC_SENSF_RES_MAXSIZE-byte target.sensf_res field without an upper-bound check. A nearby malicious NFC-F device can send an oversized SENSF_RES response to overflow the stack-local struct nfc_target.

Clamp resp->len to NFC_SENSF_RES_MAXSIZE before the copy.

Found by 0sec automated security-research tooling (https://0sec.ai).

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-80803",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "8c0695e4998dd268ff2a05951961247b7e015651",
              "lessThan": "6afb29751ee731e7f7a96feb8a15f91441e552ba",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "8c0695e4998dd268ff2a05951961247b7e015651",
              "lessThan": "e886c63d2ca7108826076989103a1ffa8a0bb8f4",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "8c0695e4998dd268ff2a05951961247b7e015651",
              "lessThan": "4e942da2869bcd646353eef706b7dd82efeb9db5",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "8c0695e4998dd268ff2a05951961247b7e015651",
              "lessThan": "d0756a98277e383c26fead988a96c91f0781cd7f",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "8c0695e4998dd268ff2a05951961247b7e015651",
              "lessThan": "af4c0606f743e009254a8d252096855335ade85d",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "8c0695e4998dd268ff2a05951961247b7e015651",
              "lessThan": "a56773e649ea99b344d6bbaf90f34c8e3fadef5d",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "8c0695e4998dd268ff2a05951961247b7e015651",
              "lessThan": "a1ef9bddfbb3ae42b036c5aa16cf386d78db70b6",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "8c0695e4998dd268ff2a05951961247b7e015651",
              "lessThan": "31aa28ed732f66ab83c40ef53d99791be69b85c4",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "8c0695e4998dd268ff2a05951961247b7e015651",
              "lessThan": "344a56d7c8e0f3cbaff0bcb1bcd95a1a1db24b16",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "net/nfc/digital_technology.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.13"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "3.13",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "5.10.267",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "status": "unaffected",
              "version": "5.15.218",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.185",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.6.154",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.106",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.47",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.1.11",
              "versionType": "semver",
              "lessThanOrEqual": "7.1.*"
            },
            {
              "status": "unaffected",
              "version": "7.2.1",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.*"
            },
            {
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "net/nfc/digital_technology.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-09-04T16:18:07.250",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/31aa28ed732f66ab83c40ef53d99791be69b85c4",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/344a56d7c8e0f3cbaff0bcb1bcd95a1a1db24b16",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/4e942da2869bcd646353eef706b7dd82efeb9db5",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/6afb29751ee731e7f7a96feb8a15f91441e552ba",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/a1ef9bddfbb3ae42b036c5aa16cf386d78db70b6",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/a56773e649ea99b344d6bbaf90f34c8e3fadef5d",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/af4c0606f743e009254a8d252096855335ade85d",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/d0756a98277e383c26fead988a96c91f0781cd7f",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/e886c63d2ca7108826076989103a1ffa8a0bb8f4",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfc: digital: clamp SENSF_RES length to the destination buffer\n\ndigital_in_recv_sensf_res() memcpy()s resp->len bytes from a remote\nNFC-F device response into the NFC_SENSF_RES_MAXSIZE-byte target.sensf_res\nfield without an upper-bound check. A nearby malicious NFC-F device can\nsend an oversized SENSF_RES response to overflow the stack-local struct\nnfc_target.\n\nClamp resp->len to NFC_SENSF_RES_MAXSIZE before the copy.\n\nFound by 0sec automated security-research tooling (https://0sec.ai)."
    }
  ],
  "lastModified": "2026-09-04T16:18:07.250",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}