CVE-2026-23330

MEDIUM EPSS 2.3%
Published Mar 25, 20263mo ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Mar 25, 2026 3mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: complete pending data exchange on device close In nci_close_device(), complete any pending data exchange before closing. The data exchange callback (e.g. rawsock_data_exchange_complete) holds a socket reference. NIPA occasionally hits this leak: unreferenced object 0xff1100000f435000 (size 2048): comm "nci_dev", pid 3954, jiffies 4295441245 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 27 00 01 40 00 00 00 00 00 00 00 00 00 00 00 00 '..@............ backtrace (crc ec2b3c5): __kmalloc_noprof+0x4db/0x730 sk_prot_alloc.isra.0+0xe4/0x1d0 sk_alloc+0x36/0x760 rawsock_create+0xd1/0x540 nfc_sock_create+0x11f/0x280 __sock_create+0x22d/0x630 __sys_socket+0x115/0x1d0 __x64_sys_socket+0x72/0xd0 do_syscall_64+0x117/0xfc0 entry_SYSCALL_64_after_hwframe+0x4b/0x53

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
2.3% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-401

Affected Products 11

VendorProductVersionRange
linuxlinux_kernel*≥3.2.1  –  <6.12.82
linuxlinux_kernel*≥6.13  –  <6.18.17
linuxlinux_kernel*≥6.19  –  <6.19.7
linuxlinux_kernel3.2any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any

References 5

  • git.kernel.org https://git.kernel.org/stable/c/66083581945bd5b8e99fe49b5aeb83d03f62d053
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/702029337b057085ea13f964822dcd95e0fe53f5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/91ff0d8c3464da7f0c43da38c195e60b660128bf
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/9df613ef6e8e873cdab969a11f74823488977f1f
  • git.kernel.org https://git.kernel.org/stable/c/d05f55d68ebdebb2b0a8480d766eaae88c8c92de
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/66083581945bd5b8e99fe49b5aeb83d03f62d053
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/702029337b057085ea13f964822dcd95e0fe53f5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/91ff0d8c3464da7f0c43da38c195e60b660128bf
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d05f55d68ebdebb2b0a8480d766eaae88c8c92de
    Patch