CVE-2026-64010

kernel: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc()

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's Near Field Communication (NFC) Logical Link Control Protocol (LLCP) connection state machine. A race condition exists where a connection acceptance packet can be processed at the same time a socket is released. This concurrency can lead to a use-after-free vulnerability, allowing a local attacker to potentially achieve privilege escalation.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-364 · Signal Handler Race Condition