01 Record

CVE-2026-80796

nfc: nci: add data_len bound checks to activation parameter extractors

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

nfc: nci: add data_len bound checks to activation parameter extractors

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.19% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 9.1% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Received. NVD last modified this record on 2026-10-19.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2026-09-04 15:13Z1 MO AGO
Last updated: 2026-10-19 08:43Z10 DAYS AGO
Reserved: 2026-08-26
Assigning CNA: Linux
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: 22ed9f700ccdd30d7727a138484a2d486bc1a4cd11074cde1a1501d6d31e2b50

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxe8c0dacd9836dc2dcb28d236c9cc3cfaa9965a20 to < 1168484fe2b3828bf24a46f3c42a8719fade679b, e8c0dacd9836dc2dcb28d236c9cc3cfaa9965a20 to < be311c0cfeadfbe815ea22d2914a98d06e3fab0e, e8c0dacd9836dc2dcb28d236c9cc3cfaa9965a20 to < 04e51353cb9fa321caaeeed8331d4cd041fbaca7, e8c0dacd9836dc2dcb28d236c9cc3cfaa9965a20 to < e25b44bd8b8cc666b49a3fe0ef547e64d5b1e300, e8c0dacd9836dc2dcb28d236c9cc3cfaa9965a20 to < 9b01f5af0dc59263b59391b148bc78d83c0354a9, e8c0dacd9836dc2dcb28d236c9cc3cfaa9965a20 to < 9620a91f8d643b680f417a435db399a04d1e06d8, e8c0dacd9836dc2dcb28d236c9cc3cfaa9965a20 to < cf9d44be50b9074a5abdc301b4a3ba3e283591df, e8c0dacd9836dc2dcb28d236c9cc3cfaa9965a20 to < f5c534b53f8c424a8e7633c9b585475c4bf4ee18, e8c0dacd9836dc2dcb28d236c9cc3cfaa9965a20 to < 0428fa2c22e2ba0cff766d3b80d461e149102045, 3.3—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/1168484fe2b3828bf24a46f3c42a8719fade679b
git.kernel.orghttps://git.kernel.org/stable/c/be311c0cfeadfbe815ea22d2914a98d06e3fab0e
git.kernel.orghttps://git.kernel.org/stable/c/04e51353cb9fa321caaeeed8331d4cd041fbaca7
git.kernel.orghttps://git.kernel.org/stable/c/e25b44bd8b8cc666b49a3fe0ef547e64d5b1e300
git.kernel.orghttps://git.kernel.org/stable/c/9b01f5af0dc59263b59391b148bc78d83c0354a9
git.kernel.orghttps://git.kernel.org/stable/c/9620a91f8d643b680f417a435db399a04d1e06d8
git.kernel.orghttps://git.kernel.org/stable/c/cf9d44be50b9074a5abdc301b4a3ba3e283591df
git.kernel.orghttps://git.kernel.org/stable/c/f5c534b53f8c424a8e7633c9b585475c4bf4ee18
git.kernel.orghttps://git.kernel.org/stable/c/0428fa2c22e2ba0cff766d3b80d461e149102045

07 Fixed in

Debian 12

linux
Fixed in 6.1.187-1
linux-6.12
Fixed in 6.12.111-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.111-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.1.12-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.