SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-80797

UNKNOWN · CVSS N/A EPSS 0.19%

Source: NVD + CISA KEV + EPSS · Published 2026-09-04 · Last synced 2026-09-19

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of the PN533 NFC driver, specifically in the cleanup process where fragmented socket buffers (skbs) are not properly purged. This oversight can lead to memory leaks if a device is removed while fragments are still queued, potentially impacting system stability and resource management. Organizations utilizing Linux systems with NFC capabilities should prioritize addressing this issue to prevent resource exhaustion and ensure optimal performance.

CVE
CVE-2026-80797
Severity
UNKNOWN
CVSS
N/A
EPSS
0.19%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: purge fragmented skbs during cleanup pn53x_common_clean() purges resp_q before freeing the common PN533 state, but it leaves fragment_skb untouched. The fragmentation helpers queue transmit fragments there while sending large initiator or target-mode frames, and those skbs remain owned by the driver until they are sent or discarded. If the device is removed while fragments are still queued, the common cleanup path frees the PN533 state without releasing the queued fragment skbs, leaking them. Purge fragment_skb during cleanup alongside resp_q.