CVE-2026-80801
Published Sep 4, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: nfc: microread: validate target discovery payload lengths microread_target_discovered() parses target discovery payloads from skb->data according to the HCI gate. The fixed field offsets and UID copies were checked only against the destination nfc_target buffers, not against the actual skb length. Validate that each gate-specific payload contains the fixed fields and UID bytes before reading or copying them.
Is your site exposed to CVE-2026-80801?
Run a free security scan — no signup, results in seconds.
EPSS — Exploit Prediction
0.0020
Probability of exploitation
0.09%
Percentile rank
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
References
Other References
https://git.kernel.org/stable/c/18f02354ed229b8e4561b580812d026e7eb29c85
https://git.kernel.org/stable/c/25519469972ef57c3edb1805dabd6c5612b90211
https://git.kernel.org/stable/c/92a6f0201bb68391b5eba1b3f330af007d7323b6
https://git.kernel.org/stable/c/953963b9ac5eecbb316617d337bfaa3d731e3c5e
https://git.kernel.org/stable/c/c6de4241f2efbbab286efbb84a9c7190298b3052
https://git.kernel.org/stable/c/cb298672282421159e53ab311fe49d204c8a52da
https://git.kernel.org/stable/c/d0902a7c454326c6384c614226ab8987f3fd425d
https://git.kernel.org/stable/c/dabfa26a208e56f4d8dbf26fddc48f188bdb0649
https://git.kernel.org/stable/c/e6397fe7b8b5ef18e051f49612d40ff476c5f7d9
Frequently Asked Questions
What is CVE-2026-80801? +
In the Linux kernel, the following vulnerability has been resolved:
nfc: microread: validate target discovery payload lengths
microread_target_discovered() parses target discovery payloads from
skb->data according to the HCI gate. The fixed field offsets and UID
copies were checked only against the destination nfc_target buffers, not
against the actual skb length.
Validate that each gate-specific payload contains the fixed fields and
UID bytes before reading or copying them.
How do I check if I'm vulnerable to CVE-2026-80801? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.