CVE-2026-23372
kernel: nfc: rawsock: cancel tx_work before socket teardown
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · March 25, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's Near Field Communication (NFC) rawsock component. A race condition can occur during the teardown of a socket and its associated device, particularly when a process is terminated (e.g., by SIGKILL). This timing issue can lead to a use-after-free vulnerability, where the system attempts to access memory that has already been released. Such an issue could result in system instability or a denial of service.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-364 · Signal Handler Race Condition