CVE-2026-80801: linux

CVSS: UnknownReceived
AliasesUBUNTU-CVE-2026-80801DEBIAN-CVE-2026-80801
Published 04-09-2026Last modified 19-10-2026
Open JSON

Vulnerability summary

CVE-2026-80801 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 14.5% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.24%
0%100%
Low · +0.05 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2 · Related 1
MGASA-2026-0506OPENSUSE-SU-2026:11773-1

Timeline

  1. 04-09-2026
    PublishedVulnerability first disclosed.
  2. 19-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: nfc: microread: validate target discovery payload lengths microread_target_discovered() parses target discovery payloads from skb->data according to the HCI gate. The fixed field offsets and UID copies were checked only against the destination nfc_target buffers, not against the actual skb length. Validate that each gate-specific payload contains the fixed fields and UID bytes before reading or copying them.

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.24%

Chance of exploitation in the next 30 days

Percentile

15%

Versus all other CVEs

30-day change

+0.05 pp

From 0.19% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.24%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu169 products
  • linuxAll versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linux< 6.1.187-1 | < 6.12.107-1 | < 7.1.12-1
  • linux-6.12< 6.12.107-1~deb12u1
Linux1 product
  • linux≥ cfad1ba87150e198be9ea32367a24e500e59de2c, < c6de4241f2efbbab286efbb84a9c7190298b3052 | ≥ cfad1ba87150e198be9ea32367a24e500e59de2c, < 92a6f0201bb68391b5eba1b3f330af007d7323b6 | ≥ cfad1ba87150e198be9ea32367a24e500e59de2c, < cb298672282421159e53ab311fe49d204c8a52da | ≥ cfad1ba87150e198be9ea32367a24e500e59de2c, < 18f02354ed229b8e4561b580812d026e7eb29c85 | ≥ cfad1ba87150e198be9ea32367a24e500e59de2c, < e6397fe7b8b5ef18e051f49612d40ff476c5f7d9 | ≥ cfad1ba87150e198be9ea32367a24e500e59de2c, < d0902a7c454326c6384c614226ab8987f3fd425d | ≥ cfad1ba87150e198be9ea32367a24e500e59de2c, < dabfa26a208e56f4d8dbf26fddc48f188bdb0649 | ≥ cfad1ba87150e198be9ea32367a24e500e59de2c, < 953963b9ac5eecbb316617d337bfaa3d731e3c5e | ≥ cfad1ba87150e198be9ea32367a24e500e59de2c, < 25519469972ef57c3edb1805dabd6c5612b90211 | 3.9

3 vendors · 172 products

References

13 links
Show all 13 references