CVE-2026-80794

This Linux kernel vulnerability affects the NFC NCI subsystem, specifically the nci_rf_discover_ntf_packet() and nci_rf_intf_activated_ntf_packet() handlers. The root cause is that on-stack notification structs are not zero-initialised before parsing. When a notification reports a zero rf_tech_sp...

CVE-2026-80794 nfc: nci: fix uninit-value in the RF discover/activated NTF handlers

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix uninit-value in the RF discover/activated NTF handlers ncirfdiscoverntfpacket and ncirfintfactivatedntfpacket each parse a notification into an on-stack struct ncirfdiscoverntf / ncirfintfactivatedntf that is not...

PT-2026-85635

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix uninit-value in the RF discover/activated NTF handlers nci rf discover ntf packet and nci rf intf activated ntf packet each parse a notification into an on-stack struct nci rf discover ntf / nci rf intf activated nt...