CVE-2026-80797
Received Received - Intake

Memory Leak in Linux Kernel NFC PN533 Driver

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: purge fragmented skbs during cleanup pn53x_common_clean() purges resp_q before freeing the common PN533 state, but it leaves fragment_skb untouched. The fragmentation helpers queue transmit fragments there while sending large initiator or target-mode frames, and those skbs remain owned by the driver until they are sent or discarded. If the device is removed while fragments are still queued, the common cleanup path frees the PN533 state without releasing the queued fragment skbs, leaking them. Purge fragment_skb during cleanup alongside resp_q.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-04
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-80797
EUVD
EUVD-2026-71440

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a memory leak in the NFC subsystem, specifically in the pn533 driver. When the PN533 device is removed while fragmented network packets (skbs) are still queued for transmission, the cleanup process fails to release these fragments, causing them to leak.

Detection Guidance

This vulnerability is specific to the Linux kernel's NFC PN533 driver and may not have direct network detection methods. Check kernel logs for errors related to pn533 or NFC devices using: dmesg | grep pn533. Monitor for memory leaks or skb-related errors during device removal.

Impact Analysis

The impact is primarily on system stability and resource usage. Leaked memory fragments can accumulate over time, potentially leading to degraded performance or system crashes due to exhausted memory resources.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for this vulnerability. If immediate updating is not possible, avoid removing NFC PN533 devices while in use to prevent potential skb leaks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80797. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart