Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-64011

nfc: llcp: Fix use-after-free in llcp_sock_release()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix use-after-free in llcp_sock_release() llcp_sock_release() unconditionally unlinks the socket from the local sockets list. However, if the socket is still in connecting state, it is on the connecting list. Fix this by checking the socket state and unlinking from the correct list.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • b4011239a08e7e6c2c6e970dfa9e8ecb73139261 to < 89ba026747019ee643d29407435ddc118e6ca908affected
  • b4011239a08e7e6c2c6e970dfa9e8ecb73139261 to < fb29f6bbe433f3decad227588809636c25f2a287affected
  • b4011239a08e7e6c2c6e970dfa9e8ecb73139261 to < 2dfdaaf7d933b676124aadec6698825e95f94fe9affected
  • b4011239a08e7e6c2c6e970dfa9e8ecb73139261 to < e00f50f8697724a6f1d2d35744c1332c9912dac5affected
  • b4011239a08e7e6c2c6e970dfa9e8ecb73139261 to < cdc17e09a636c7f936f771902535a7515a7608fcaffected
  • b4011239a08e7e6c2c6e970dfa9e8ecb73139261 to < 912ebc49d4406a17fe73e5671d674fbc2f6b2634affected
  • b4011239a08e7e6c2c6e970dfa9e8ecb73139261 to < bc421d0826dedbba37580a25405eafb599e76d42affected
  • b4011239a08e7e6c2c6e970dfa9e8ecb73139261 to < f4268b466190dae95a7585f69b4f1f8ad097632caffected
  • da989ee1c7702050741a551df6866cc1588f277baffected
  • 3.10.10 to < 3.11affected

Linux Linux

Default version status: affected

  • 3.11affected
  • 0 to < 3.11unaffected
  • 5.10.259 to ≤ 5.10.*unaffected
  • 5.15.210 to ≤ 5.15.*unaffected
  • 6.1.176 to ≤ 6.1.*unaffected
  • 6.6.143 to ≤ 6.6.*unaffected
  • 6.12.93 to ≤ 6.12.*unaffected
  • 6.18.35 to ≤ 6.18.*unaffected
  • 7.0.12 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References