CVE Database›Document archive›CVE-2026-46267

CVE-2026-46267

kernel: nfc: hci: shdlc: Stop timers and work before freeing context

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 3, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's Near Field Communication (NFC) Host Controller Interface (HCI) Synchronous High-level Data Link Control (SHDLC) subsystem. This vulnerability arises because timers and work items can remain active and access freed SHDLC state and data queues during the deinitialization process (llc_shdlc_deinit()). This can lead to a Use-After-Free (UAF) condition and other shutdown race issues, potentially causing system instability or crashes.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-364 · Signal Handler Race Condition