CVE-2026-80801
Received Received - Intake

NFC Target Discovery Payload Length Validation Flaw in Linux Kernel

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: nfc: microread: validate target discovery payload lengths microread_target_discovered() parses target discovery payloads from skb->data according to the HCI gate. The fixed field offsets and UID copies were checked only against the destination nfc_target buffers, not against the actual skb length. Validate that each gate-specific payload contains the fixed fields and UID bytes before reading or copying them.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-04
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-80801
EUVD
EUVD-2026-71236

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves improper validation of target discovery payload lengths in the NFC microread driver. The function microread_target_discovered() reads payload data from skb->data but only checks if the data fits within the destination buffer, not if it fits within the actual skb length. This could allow an attacker to send malformed payloads that exceed the skb length, leading to potential out-of-bounds reads or memory corruption.

Detection Guidance

This vulnerability affects the Linux kernel's NFC microread driver. Detection requires checking if your system runs a vulnerable kernel version. Use uname -a to check the kernel version. If it is before the patched version, the system is likely vulnerable.

Impact Analysis

If exploited, this vulnerability could allow an attacker to cause a denial of service, crash the system, or potentially execute arbitrary code with kernel privileges. It affects systems using the NFC microread driver, which may be present in devices with near-field communication capabilities.

Mitigation Strategies

Update the Linux kernel to the latest patched version immediately. Disable the microread NFC driver if not in use by blacklisting the module. Monitor vendor advisories for kernel updates and apply them promptly.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80801. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart