CVE Database›CVE-2026-23372

CVE-2026-23372

kernel: nfc: rawsock: cancel tx_work before socket teardown

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · March 25, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's Near Field Communication (NFC) rawsock component. A race condition can occur during the teardown of a socket and its associated device, particularly when a process is terminated (e.g., by SIGKILL). This timing issue can lead to a use-after-free vulnerability, where the system attempts to access memory that has already been released. Such an issue could result in system instability or a denial of service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-364 · Signal Handler Race Condition