CVE-2026-80803

In the Linux kernel, the following vulnerability has been resolved:

nfc: digital: clamp SENSF RES length to the destination buffer

digital in recv sensf res() memcpy()s resp->len bytes from a remote NFC-F device response into the NFC SENSF RES MAXSIZE-byte target.sensf res field without an upper-bound check. A nearby malicious NFC-F device can send an oversized SENSF RES response to overflow the stack-local struct nfc target.

Clamp resp->len to NFC SENSF RES MAXSIZE before the copy.

Found by 0sec automated security-research tooling (https://0sec.ai).