PT-2026-46030 · Linux+1 · Linux Kernel+1

CVE-2026-46267 · Published 2026-06-03 · Updated 2026-07-31

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) condition exists in the Linux kernel's NFC HCI SHDLC implementation. The function llc shdlc deinit() purges SHDLC skb queues and frees the llc shdlc structure while timers and state machine work may still be active. Because timer callbacks can schedule sm work, which subsequently accesses the SHDLC state and skb queues, a parallel teardown process can lead to shutdown races and memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-46267

SUSE-SU-2026:3130-1

SUSE-SU-2026:3166-1

USN-8492-1

USN-8492-2

USN-8492-3

USN-8492-4

USN-8492-5

USN-8497-1

USN-8498-1

USN-8499-1

USN-8575-1

USN-8575-2

USN-8575-3

USN-8576-1

USN-8576-2

USN-8606-1

USN-8607-1

USN-8609-1

USN-8610-1

USN-8619-1

USN-8620-1

USN-8620-2

USN-8620-3

USN-8620-4

Affected Products

Linuxmint

Linux Kernel

References · 2651

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46267.json · Exploit
• https://ubuntu.com/security/CVE-2025-71198 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43117 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-52916 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31416 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31580 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46128 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46157 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23086 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31576 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45928 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23361 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43412 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23138 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23262 · Vendor Advisory