CVE-2026-64011

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix use-after-free in llcp_sock_release() llcp_sock_release() unconditionally unlinks the socket from the local sockets list. However, if the socket is still in connecting state, it is on the connecting list. Fix this by checking the socket state and unlinking from the correct list.

CVSS 3.1

7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-25)

CWE

CWE-416

Published

2026-07-19

Modified

2026-10-13

Record from

the NVD, synced 2026-10-19

Affected

• linux:linux_kernel

References

• https://git.kernel.org/stable/c/2dfdaaf7d933b676124aadec6698825e95f94fe9
• https://git.kernel.org/stable/c/89ba026747019ee643d29407435ddc118e6ca908
• https://git.kernel.org/stable/c/912ebc49d4406a17fe73e5671d674fbc2f6b2634
• https://git.kernel.org/stable/c/bc421d0826dedbba37580a25405eafb599e76d42
• https://git.kernel.org/stable/c/cdc17e09a636c7f936f771902535a7515a7608fc

Check your stackJSON