CVE-2026-64011

A flaw was found in the Linux kernel's Near Field Communication (NFC) Logical Link Control Protocol (LLCP) component. The llcp_sock_release() function, which handles the release of LLCP sockets, can incorrectly unlink a socket while it is still in a connecting state. This can result in a use-after-free vulnerability, where the system attempts to access deallocated memory. A local attacker could potentially exploit this to cause a system crash (denial of service) or, in some scenarios, execute arbitrary code.

This vulnerability is rated as Moderate impact because successful exploitation requires local user access and interaction with the kernel NFC subsystem, limiting the overall attack surface in standard enterprise environments. Near Field Communication protocols are typically unused on servers and require local socket operations to trigger the flawed list unlinking during connection teardown. Although a local attacker could trigger a use-after-free condition to crash the system or potentially escalate privileges, exploitation is constrained by local execution requirements and the uncommon deployment of NFC hardware.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.