Linux Distros Unpatched Vulnerability : CVE-2026-80794

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: nci: fix uninit-value in the RF discover/activated NTF handlers ncirfdiscoverntfpacket and ncirfintfactivatedntfpacket each parse a notification into an...

PT-2026-85641

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: bound the connect sn TLV walk to the skb Commit 27256cdb290e "nfc: llcp: bound SNL TLV parsing to the skb and add length checks" fixed the unbounded TLV walk in nfc llcp recv snl, and commit d8bd2dedbde5 "nfc: llcp: fi...

PT-2026-85635

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix uninit-value in the RF discover/activated NTF handlers nci rf discover ntf packet and nci rf intf activated ntf packet each parse a notification into an on-stack struct nci rf discover ntf / nci rf intf activated nt...

PT-2026-85642

In the Linux kernel, the following vulnerability has been resolved: nfc: microread: validate target discovery payload lengths microread target discovered parses target discovery payloads from skb-data according to the HCI gate. The fixed field offsets and UID copies were checked only against the...

Linux Distros Unpatched Vulnerability : CVE-2026-80796

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: nci: add datalen bound checks to activation parameter extractors nciextractactivationparamsisodep and nciextractactivationparamsnfcdep read an inner length...

Linux Distros Unpatched Vulnerability : CVE-2026-80803

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: digital: clamp SENSFRES length to the destination buffer digitalinrecvsensfres memcpys resp-len bytes from a remote NFC-F device response into the...

PT-2026-85643

In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: bound the device-reported read length and fix an skb leak fdp nci i2c read takes the next packet length from two device-supplied bytes and never validates it. The value is a u16 used as the i2c master recv count into a...

PT-2026-85644

In the Linux kernel, the following vulnerability has been resolved: nfc: digital: clamp SENSF RES length to the destination buffer digital in recv sensf res memcpys resp-len bytes from a remote NFC-F device response into the NFC SENSF RES MAXSIZE-byte target.sensf res field without an upper-bound...

PT-2026-85688

In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ATR REQ length against the received frame st21nfca tm recv atr req checks that the received ATR REQ frame is at least ST21NFCA ATR REQ MIN SIZE and that the self-declared atr req-length is at least...

PT-2026-85637

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: add data len bound checks to activation parameter extractors nci extract activation params iso dep and nci extract activation params nfc dep read an inner length byte from the NCI RF INTF ACTIVATED NTF payload and use i...

PT-2026-85638

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: purge fragmented skbs during cleanup pn53x common clean purges resp q before freeing the common PN533 state, but it leaves fragment skb untouched. The fragmentation helpers queue transmit fragments there while sending...

Linux Distros Unpatched Vulnerability : CVE-2026-80795

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: nci: fix out-of-bounds write in ncitargetautoactivated ncitargetautoactivated appends a target to the fixed-size array ndev-targetsNCIMAXDISCOVEREDTARGETS...

Linux Distros Unpatched Vulnerability : CVE-2026-80798

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: llcp: reject PDUs shorter than the LLCP header Every LLCP PDU begins with a two-byte header DSAP/SSAP + PTYPE, but the receive path never checked that a...

Linux Distros Unpatched Vulnerability : CVE-2026-80797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: pn533: purge fragmented skbs during cleanup pn53xcommonclean purges respq before freeing the common PN533 state, but it leaves fragmentskb untouched. The...

PT-2026-85640

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers nfc llcp parse gb tlv and nfc llcp parse connection tlv contain three related bugs in their TLV parsing loops: 1. 'offset' is declared u8 but tlv array len is u16. When TL...

Specter-FlipperZero v2.8

Specter 👻 Sweep for the readers you can't see. -26E8CA?style=for-the-badge&labelColor=0a0f16 Specter turns your Flipper Zero into a pocket counter-surveillance...

URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep

...

SUSE CVE-2026-19953

URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep lowercases each host label but performs no Unicode normalization. IDNA requires a label to be normalized to Form C before it is encoded RFC 5891, so a label...

PUB-A-522375531

In phNxpNciHalextprocessnfcinitrsp of phNxpNciHalext.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-19953

URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep lowercases each host label but performs no Unicode normalization. IDNA requires a label to be normalized to Form C before it is encoded RFC 5891, so a label...