Answer in brief
CVE-2026-23330 records a Medium severity (CVSS 5.5) vulnerability in nfc: nci: complete pending data exchange on device close. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 5.5. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:3.2:-:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=38f04c6b1b682f1879441e2925403ad9aff9e229 <75fdb22ef0635c02337de0c08c98f93f37b5cbee || >=38f04c6b1b682f1879441e2925403ad9aff9e229 <9df613ef6e8e873cdab969a11f74823488977f1f || >=38f04c6b1b682f1879441e2925403ad9aff9e229 <702029337b057085ea13f964822dcd95e0fe53f5 || >=38f04c6b1b682f1879441e2925403ad9aff9e229 <91ff0d8c3464da7f0c43da38c195e60b660128bf || >=38f04c6b1b682f1879441e2925403ad9aff9e229 <d05f55d68ebdebb2b0a8480d766eaae88c8c92de || >=38f04c6b1b682f1879441e2925403ad9aff9e229 <66083581945bd5b8e99fe49b5aeb83d03f62d053 | 75fdb22ef0635c02337de0c08c98f93f37b5cbee, 9df613ef6e8e873cdab969a11f74823488977f1f, 702029337b057085ea13f964822dcd95e0fe53f5, 91ff0d8c3464da7f0c43da38c195e60b660128bf, d05f55d68ebdebb2b0a8480d766eaae88c8c92de, 66083581945bd5b8e99fe49b5aeb83d03f62d053 |
| Linux/Linuxgeneric | 3.2 | Not reported |
Published upstream
Mar 25, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 30, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 30, 2026
In the Linux kernel, the following vulnerability has been resolved: nfc: nci: complete pending data exchange on device close In nci_close_device(), complete any pending data exchange before closing. The data exchange callback (e.g. rawsock_data_exchange_complete) holds a socket reference. NIPA occasionally hits this leak: unreferenced object 0xff1100000f435000 (size 2048): comm "nci_dev", pid 3954, jiffies 4295441245 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 27 00 01 40 00 00 00 00 00 00 00 00 00 00 00 00 '..@............ backtrace (crc ec2b3c5): __kmalloc_noprof+0x4db/0x730 sk_prot_alloc.isra.0+0xe4/0x1d0 sk_alloc+0x36/0x760 rawsock_create+0xd1/0x540 nfc_sock_create+0x11f/0x280 __sock_create+0x22d/0x630 __sys_socket+0x115/0x1d0 __x64_sys_socket+0x72/0xd0 do_syscall_64+0x117/0xfc0 entry_SYSCALL_64_after_hwframe+0x4b/0x53
Quoted source text, attributed separately from HOL analysis.