PT-2026-61328 · Linux · Linux Kernel

CVE-2026-64011 · Published 2026-07-19 · Updated 2026-07-19

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the Logical Link Control Protocol (LLCP) component of the NFC subsystem. The llcp sock release() function unconditionally unlinks the socket from the local sockets list; however, if the socket is still in a connecting state, it remains on the connecting list, leading to a potential memory corruption. Use-after-free is a condition where a program continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-64011

Affected Products

Linux Kernel

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2026-64011 · Security Note
• https://twitter.com/CVEnew/status/2078861419013902404 · Twitter Post
• https://git.kernel.org/stable/c/fb29f6bbe433f3decad227588809636c25f2a287 · Note
• https://git.kernel.org/stable/c/f4268b466190dae95a7585f69b4f1f8ad097632c · Note
• https://git.kernel.org/stable/c/912ebc49d4406a17fe73e5671d674fbc2f6b2634 · Note
• https://git.kernel.org/stable/c/89ba026747019ee643d29407435ddc118e6ca908 · Note
• https://git.kernel.org/stable/c/e00f50f8697724a6f1d2d35744c1332c9912dac5 · Note
• https://git.kernel.org/stable/c/cdc17e09a636c7f936f771902535a7515a7608fc · Note
• https://git.kernel.org/stable/c/2dfdaaf7d933b676124aadec6698825e95f94fe9 · Note
• https://git.kernel.org/stable/c/bc421d0826dedbba37580a25405eafb599e76d42 · Note