CVE-2026-80803

CVE-2026-80803 affects the Linux kernel NFC digital driver. The function digital_in_recv_sensf_res() copies resp->len bytes from a remote NFC-F device response into a fixed-size NFC_SENSF_RES_MAXSIZE buffer without an upper-bound check. A nearby malicious NFC-F device can send an oversized SEN...

EUVD-2026-71238

In the Linux kernel, the following vulnerability has been resolved: nfc: digital: clamp SENSFRES length to the destination buffer digitalinrecvsensfres memcpys resp-len bytes from a remote NFC-F device response into the NFCSENSFRESMAXSIZE-byte target.sensfres field without an upper-bound check. A...

CVE-2026-80803 nfc: digital: clamp SENSF_RES length to the destination buffer

In the Linux kernel, the following vulnerability has been resolved: nfc: digital: clamp SENSFRES length to the destination buffer digitalinrecvsensfres memcpys resp-len bytes from a remote NFC-F device response into the NFCSENSFRESMAXSIZE-byte target.sensfres field without an upper-bound check. A...

EUVD-2026-71237

In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: bound the device-reported read length and fix an skb leak fdpncii2cread takes the next packet length from two device-supplied bytes and never validates it. The value is a u16 used as the i2cmasterrecv count into a...

CVE-2026-80783 HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event()

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: prevent unbounded recursion in magicmouserawevent magicmouserawevent handles DOUBLEREPORTID 0xf7 packets, which pack two touch reports into one, by splitting the packet and calling itself on each half. The only...

CVE-2026-80783 HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event()

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: prevent unbounded recursion in magicmouserawevent magicmouserawevent handles DOUBLEREPORTID 0xf7 packets, which pack two touch reports into one, by splitting the packet and calling itself on each half. The only...

CVE-2026-80783

CVE-2026-80783 affects the Linux kernel's HID magicmouse driver. The function magicmouse_raw_event() handles DOUBLE_REPORT_ID (0xf7) packets by splitting them and recursing on each half. The only guard was a size

EUVD-2026-71426

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: prevent unbounded recursion in magicmouserawevent magicmouserawevent handles DOUBLEREPORTID 0xf7 packets, which pack two touch reports into one, by splitting the packet and calling itself on each half. The only...

CVE-2026-85508

FreeIPMI (a suite of IPMI-based tools for server management) is affected by a stack-based buffer overflow in the ipmi-oem component, specifically in the function _output_dell_system_info_cmc_ipv6_info located in ipmi-oem/ipmi-oem-dell.c. The flaw is triggered when using the cmc-ipv6-info subcomma...

EUVD-2026-70803

MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker-controlled length fields without validation. Attackers can craft malicious encoded strings with mismatched declared and actual field lengths to overflow heap and stack...

Linux Distros Unpatched Vulnerability : CVE-2026-80783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: magicmouse: prevent unbounded recursion in magicmouserawevent magicmouserawevent handles DOUBLEREPORTID 0xf7 packets, which pack two touch reports into one...

PT-2026-91297

In the Linux kernel, the following vulnerability has been resolved: nfc: digital: clamp SENSF RES length to the destination buffer digital in recv sensf res memcpys resp-len bytes from a remote NFC-F device response into the NFC SENSF RES MAXSIZE-byte target.sensf res field without an upper-bound...

PT-2026-91318

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: prevent unbounded recursion in magicmouse raw event magicmouse raw event handles DOUBLE REPORT ID 0xf7 packets, which pack two touch reports into one, by splitting the packet and calling itself on each half. The...

CVE-2026-80803: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfc: digital: clamp SENSFRES length to the destination buffer digitalinrecvsensfres memcpys resp-len bytes from a remote NFC-F device response into the NFCSENSFRESMAXSIZE-byte target.sensfres field without an upper-bound check. A...

CVE-2026-80783: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: prevent unbounded recursion in magicmouserawevent magicmouserawevent handles DOUBLEREPORTID 0xf7 packets, which pack two touch reports into one, by splitting the packet and calling itself on each half. The only...

PT-2026-85644

In the Linux kernel, the following vulnerability has been resolved: nfc: digital: clamp SENSF RES length to the destination buffer digital in recv sensf res memcpys resp-len bytes from a remote NFC-F device response into the NFC SENSF RES MAXSIZE-byte target.sensf res field without an upper-bound...

PT-2026-85624

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: prevent unbounded recursion in magicmouse raw event magicmouse raw event handles DOUBLE REPORT ID 0xf7 packets, which pack two touch reports into one, by splitting the packet and calling itself on each half. The...

Linux Distros Unpatched Vulnerability : CVE-2026-80803

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: digital: clamp SENSFRES length to the destination buffer digitalinrecvsensfres memcpys resp-len bytes from a remote NFC-F device response into the...

Linux Distros Unpatched Vulnerability : CVE-2026-85218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AVRCP ListPlayerAttributes double stack overflow in avrcplistplayerattributesrsp/avrcpgetcurrentplayervalue fedora-all CVE-2026-85218 Note that Nessus relies on...

MiracleLinux 9 : pipewire-1.4.11-1.el9_8.2 (AXSA:2026-1754:03)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1754:03 advisory. pipewire: RAOP RTSP NULL Deref CVE-2026-14324 pipewire: Pulse Server alloca Stack Overflow CVE-2026-14330 Tenable has extracted the preceding...