CVE-2026-46267
kernel: nfc: hci: shdlc: Stop timers and work before freeing context
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · June 3, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's Near Field Communication (NFC) Host Controller Interface (HCI) Synchronous High-level Data Link Control (SHDLC) subsystem. This vulnerability arises because timers and work items can remain active and access freed SHDLC state and data queues during the deinitialization process (llc_shdlc_deinit()). This can lead to a Use-After-Free (UAF) condition and other shutdown race issues, potentially causing system instability or crashes.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-364 · Signal Handler Race Condition