CVE-2026-80797: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: purge fragmented skbs during cleanup pn53xcommonclean purges respq before freeing the common PN533 state, but it leaves fragmentskb untouched. The fragmentation helpers queue transmit fragments there while sending lar...

CVE-2026-80798: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: reject PDUs shorter than the LLCP header Every LLCP PDU begins with a two-byte header DSAP/SSAP + PTYPE, but the receive path never checked that a frame is at least LLCPHEADERSIZE bytes before parsing it. nfcllcprxskb...

CVE-2026-80803: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfc: digital: clamp SENSFRES length to the destination buffer digitalinrecvsensfres memcpys resp-len bytes from a remote NFC-F device response into the NFCSENSFRESMAXSIZE-byte target.sensfres field without an upper-bound check. A...

PT-2026-85643

In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: bound the device-reported read length and fix an skb leak fdp nci i2c read takes the next packet length from two device-supplied bytes and never validates it. The value is a u16 used as the i2c master recv count into a...

Linux Distros Unpatched Vulnerability : CVE-2026-80799

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers nfcllcpparsegbtlv and nfcllcpparseconnectiontlv contain three related bugs in their TLV parsing loops:...

Linux Distros Unpatched Vulnerability : CVE-2026-80803

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: digital: clamp SENSFRES length to the destination buffer digitalinrecvsensfres memcpys resp-len bytes from a remote NFC-F device response into the...

Linux Distros Unpatched Vulnerability : CVE-2026-80794

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: nci: fix uninit-value in the RF discover/activated NTF handlers ncirfdiscoverntfpacket and ncirfintfactivatedntfpacket each parse a notification into an...

Linux Distros Unpatched Vulnerability : CVE-2026-80801

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: microread: validate target discovery payload lengths microreadtargetdiscovered parses target discovery payloads from skb-data according to the HCI gate. Th...

PT-2026-85635

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix uninit-value in the RF discover/activated NTF handlers nci rf discover ntf packet and nci rf intf activated ntf packet each parse a notification into an on-stack struct nci rf discover ntf / nci rf intf activated nt...

PT-2026-85642

In the Linux kernel, the following vulnerability has been resolved: nfc: microread: validate target discovery payload lengths microread target discovered parses target discovery payloads from skb-data according to the HCI gate. The fixed field offsets and UID copies were checked only against the...

PT-2026-85644

In the Linux kernel, the following vulnerability has been resolved: nfc: digital: clamp SENSF RES length to the destination buffer digital in recv sensf res memcpys resp-len bytes from a remote NFC-F device response into the NFC SENSF RES MAXSIZE-byte target.sensf res field without an upper-bound...

PT-2026-85641

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: bound the connect sn TLV walk to the skb Commit 27256cdb290e "nfc: llcp: bound SNL TLV parsing to the skb and add length checks" fixed the unbounded TLV walk in nfc llcp recv snl, and commit d8bd2dedbde5 "nfc: llcp: fi...

Linux Distros Unpatched Vulnerability : CVE-2026-80796

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: nci: add datalen bound checks to activation parameter extractors nciextractactivationparamsisodep and nciextractactivationparamsnfcdep read an inner length...

PT-2026-85638

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: purge fragmented skbs during cleanup pn53x common clean purges resp q before freeing the common PN533 state, but it leaves fragment skb untouched. The fragmentation helpers queue transmit fragments there while sending...

PT-2026-85688

In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ATR REQ length against the received frame st21nfca tm recv atr req checks that the received ATR REQ frame is at least ST21NFCA ATR REQ MIN SIZE and that the self-declared atr req-length is at least...

PT-2026-85637

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: add data len bound checks to activation parameter extractors nci extract activation params iso dep and nci extract activation params nfc dep read an inner length byte from the NCI RF INTF ACTIVATED NTF payload and use i...

Linux Distros Unpatched Vulnerability : CVE-2026-80798

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: llcp: reject PDUs shorter than the LLCP header Every LLCP PDU begins with a two-byte header DSAP/SSAP + PTYPE, but the receive path never checked that a...

Linux Distros Unpatched Vulnerability : CVE-2026-80797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: pn533: purge fragmented skbs during cleanup pn53xcommonclean purges respq before freeing the common PN533 state, but it leaves fragmentskb untouched. The...

CVE-2026-80823: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ATRREQ length against the received frame st21nfcatmrecvatrreq checks that the received ATRREQ frame is at least ST21NFCAATRREQMINSIZE and that the self-declared atrreq-length is at least sizeofstruct...

CVE-2026-80802: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: bound the device-reported read length and fix an skb leak fdpncii2cread takes the next packet length from two device-supplied bytes and never validates it. The value is a u16 used as the i2cmasterrecv count into a...