Description
A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition between kobject creation and delete. This vulnerability allows a local attacker with CAP_NET_ADMIN privilege to leak kernel information.
Affected products
linux: linux kernel
References2
- github.com/torvalds/linux/commit/da5c0f119203ad9728920456a0f52a… PatchThird Party Advisory
- github.com/torvalds/linux/commit/da5c0f119203ad9728920456a0f52a… PatchThird Party Advisory
Metrics
- CVSS 3.1
-
4.1
MEDIUM
Score source: NVD
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N - EPSS — exploit probability
- 0% percentile: 4 · as of 6 November 2026
- CWE
- CWE-416CWE-367
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.