CVE-2026-64011

HighCVSS 7.8/10Last modified Oct 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

nfc: llcp: Fix use-after-free in llcp_sock_release()

llcp_sock_release() unconditionally unlinks the socket from the local sockets list. However, if the socket is still in connecting state, it is on the connecting list.

Fix this by checking the socket state and unlinking from the correct list.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
LinuxLinux>= b4011239a08e7e6c2c6e970dfa9e8ecb73139261, < 89ba026747019ee643d29407435ddc118e6ca908; >= b4011239a08e7e6c2c6e970dfa9e8ecb73139261, < fb29f6bbe433f3decad227588809636c25f2a287; >= b4011239a08e7e6c2c6e970dfa9e8ecb73139261, < 2dfdaaf7d933b676124aadec6698825e95f94fe9; >= b4011239a08e7e6c2c6e970dfa9e8ecb73139261, < e00f50f8697724a6f1d2d35744c1332c9912dac5; >= b4011239a08e7e6c2c6e970dfa9e8ecb73139261, < cdc17e09a636c7f936f771902535a7515a7608fc; >= b4011239a08e7e6c2c6e970dfa9e8ecb73139261, < 912ebc49d4406a17fe73e5671d674fbc2f6b2634; >= b4011239a08e7e6c2c6e970dfa9e8ecb73139261, < bc421d0826dedbba37580a25405eafb599e76d42; >= b4011239a08e7e6c2c6e970dfa9e8ecb73139261, < f4268b466190dae95a7585f69b4f1f8ad097632c; da989ee1c7702050741a551df6866cc1588f277b; >= 3.10.10, < 3.11
LinuxLinux3.11

References

Timeline

Published
Jul 19, 2026
Last modified
Oct 13, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-640125.5In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_deqCVE-2026-640135.5In the Linux kernel, the following vulnerability has been resolved: ACPI: button: Fix ACPI GPE handler leak during removal Commit a7e23ec1CVE-2026-640147.1In the Linux kernel, the following vulnerability has been resolved: Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size CVE-2026-640157.8In the Linux kernel, the following vulnerability has been resolved: security/keys: fix missed RCU read section on lookup Nicholas Carlini CVE-2026-640169.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix durable reconnect error path file lifetime After a durable CVE-2026-640177.8In the Linux kernel, the following vulnerability has been resolved: blk-mq: pop cached request if it is usable When submitting a bio to blCVE-2026-640189.3In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rx_req_idx to prevent out-of-bounds array access ICVE-2026-640195.5In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dma mapping leak on data setup error We're leaking the iCVE-2026-64026.5webpack-dev-server versions up to and including 5.2.3 are vulnerable to cross-origin source code exposure when serving over a non-potentiallCVE-2026-640207.5In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix dma_vecs leak on p2p memory We don't unmap P2P memory, sCVE-2026-640215.5In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix exec_queue leak on width check in stream open In xe_oa_CVE-2026-640225.5In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: remove the software node when deactivating the aggreg
CVE-2026-64011: High severity, CVSS 7.8 | Vulnix