Linux Kernel Vulnerability in NFC Protocol Handling by Vendor

CVE-2026-31629

What is CVE-2026-31629?

A flaw in the NFC protocol handling of the Linux Kernel causes potential issues during socket operations. In the functions nfc_llcp_recv_hdlc() and nfc_llcp_recv_disc(), a failure to return after checking for a closed socket state allows execution to incorrectly proceed. This oversight can lead to a double release of socket resources and subsequently trigger a use-after-free condition. The issue is addressed by ensuring proper return statements are added following the LLCP_CLOSED condition checks.

References