CVE-2026-23339

kernel: nfc: nci: free skb on nci_transceive early error paths

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · March 25, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's Near Field Communication (NFC) subsystem. When the nci_transceive() function encounters certain error conditions, it fails to properly free allocated kernel memory. This memory leak can accumulate over time, potentially leading to resource exhaustion and affecting system stability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-772 · Missing Release of Resource after Effective Lifetime