PT-2026-8162 · Linux+2 · Linux Kernel+2

Syzbot · Published 2026-01-01 · Updated 2026-05-22 · CVE-2026-23167

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contained a race condition between rfkill and nci unregister device() within the NFC subsystem. Specifically, the issue stemmed from the order in which device unregistration occurred, potentially leading to a use-after-free scenario when rfkill attempted to access resources after they had been freed by nci unregister device(). The fix involved reordering the unregistration process to ensure rfkill interfaces are removed before nci close device() is called, preventing the race condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2026-23167

OPENSUSE-SU-2026:20416-1

SUSE-SU-2026:0962-1

SUSE-SU-2026:1081-1

SUSE-SU-2026:20667-1

SUSE-SU-2026:20720-1

SUSE-SU-2026:20838-1

SUSE-SU-2026:20845-1

SUSE-SU-2026:20876-1

SUSE-SU-2026:20931-1

SUSE-SU-2026:21284-1

USN-8162-1

USN-8180-1

USN-8180-2

USN-8180-3

USN-8180-4

USN-8180-5

USN-8180-6

USN-8186-1

USN-8187-1

USN-8188-1

USN-8243-1

USN-8275-1

USN-8278-1

USN-8289-1

USN-8296-1

USN-8297-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 2152

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23167.json · Exploit
• https://ubuntu.com/security/CVE-2026-23083 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71137 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40055 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68813 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23148 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-23167 · Security Note
• https://ubuntu.com/security/CVE-2025-40030 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23123 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40149 · Vendor Advisory
• https://git.kernel.org/stable/c/eaa5da5130deda26420273d4610cf6e4f794ed75 · Patch
• https://git.kernel.org/stable/c/8ea4d96419fb20f15a52ce657d49f1e7c91eb7ac · Patch
• https://ubuntu.com/security/CVE-2026-23032 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23209 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40194 · Vendor Advisory