CVE-2026-90224

A flaw was found in the Near Field Communication (NFC) Controller Interface (NCI) subsystem of the Linux kernel. A double completion race condition can occur when nci_close_device() and nci_rx_work concurrently call nci_data_exchange_complete(). This can lead to a use-after-free vulnerability, where a network socket is prematurely freed while still in use. An attacker could potentially exploit this to cause a denial of service or achieve arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.