Use-After-Free Vulnerability in Linux Kernel NFC Raw Socket

CVE-2026-23372

What is CVE-2026-23372?

In the Linux kernel's NFC subsystem, a vulnerability exists related to the raw socket functionality. The issue arises in the 'rawsock_release()' function, where pending transmission work can remain active even when the socket is being torn down. If a process is killed unexpectedly, as might happen with a SIGKILL signal, this can lead to a race condition between the ongoing work and the cleanup processes, potentially resulting in use-after-free scenarios or memory leaks. The vulnerability necessitates careful synchronization to ensure all queued operations are purged and pending work is canceled before the socket is finalized.

References