Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-23339

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: free skb on nci_transceive early error paths nci_transceive() takes ownership of the skb passed by the caller, but the -EPROTO, -EINVAL, and -EBUSY error paths return without freeing it. Due to issues clearing NCI_DATA_EXCHANGE fixed by subsequent changes the nci/nci_dev selftest hits the error path occasionally in NIPA, and kmemleak detects leaks: unreferenced object 0xff11000015ce6a40 (size 640): comm "nci_dev"
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:8a8f284b4a9859e2af73ca09d9b67c4e96e909b37037aaa29e4d735e8d8ead17
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/nfc/nci/core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"b367cb44d919f35b07cd56feffa15e68cd9f53f9","status":"affected","version":"6a2968aaf50c7a22fced77a5e24aa636281efca8","versionType":"git"},{"lessThan":"6d898f943766440cf766d30364e715111c3563b5","status":"affected","version":"6a2968aaf50c7a22fced77a5e24aa636281efca8","versionType":"git"},{"lessThan":"33f6b8a96dda045789796c3bcb451c74ac158039","status":"affected","version":"6a2968aaf50c7a22fced77a5e24…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:3a0f939465a8cef108115a24aff79a78f40ef753f2f312f7fa14e7dfdfd263d5 · sha256:11e365caec16fb6c… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/nfc/nci/core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.2"},{"lessThan":"3.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.167","versionType":"semver"},{"lessThanOrEq…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:3a0f939465a8cef108115a24aff79a78f40ef753f2f312f7fa14e7dfdfd263d5 · sha256:11e365caec16fb6c… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/nfc/nci/core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"b367cb44d919f35b07cd56feffa15e68cd9f53f9","status":"affected","version":"6a2968aaf50c7a22fced77a5e24aa636281efca8","versionType":"git"},{"lessThan":"6d898f943766440cf766d30364e715111c3563b5","status":"affected","version":"6a2968aaf50c7a22fced77a5e24aa636281efca8","versionType":"git"},{"lessThan":"33f6b8a96dda045789796c3bcb451c74ac158039","status":"affected","version":"6a2968aaf50c7a22fced77a5e24…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:3a0f939465a8cef108115a24aff79a78f40ef753f2f312f7fa14e7dfdfd263d5 · sha256:11e365caec16fb6c… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["net/nfc/nci/core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.2"},{"lessThan":"3.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.167","versionType":"semver"},{"lessThanOrEq…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:3a0f939465a8cef108115a24aff79a78f40ef753f2f312f7fa14e7dfdfd263d5 · sha256:11e365caec16fb6c… · /containers/cna/affected/1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/3245801d44a44c090acefe19a12d22d12cac45c5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3a0f939465a8cef108115a24aff79a78f40ef753f2f312f7fa14e7dfdfd263d5 · sha256:11e365caec16fb6c… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/33f6b8a96dda045789796c3bcb451c74ac158039"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3a0f939465a8cef108115a24aff79a78f40ef753f2f312f7fa14e7dfdfd263d5 · sha256:11e365caec16fb6c… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/54f7f0eaafa56b5994cdb5c7967946922c2e1d22"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3a0f939465a8cef108115a24aff79a78f40ef753f2f312f7fa14e7dfdfd263d5 · sha256:11e365caec16fb6c… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/6d898f943766440cf766d30364e715111c3563b5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3a0f939465a8cef108115a24aff79a78f40ef753f2f312f7fa14e7dfdfd263d5 · sha256:11e365caec16fb6c… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/7bd4b0c4779f978a6528c9b7937d2ca18e936e2c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3a0f939465a8cef108115a24aff79a78f40ef753f2f312f7fa14e7dfdfd263d5 · sha256:11e365caec16fb6c… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/9d448bbab724b94d6c561e1f314656f5b88a7cb3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3a0f939465a8cef108115a24aff79a78f40ef753f2f312f7fa14e7dfdfd263d5 · sha256:11e365caec16fb6c… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/b367cb44d919f35b07cd56feffa15e68cd9f53f9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3a0f939465a8cef108115a24aff79a78f40ef753f2f312f7fa14e7dfdfd263d5 · sha256:11e365caec16fb6c… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/dcbcccfc5195c9caaa4bb8d31f23c345f00a9e89"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3a0f939465a8cef108115a24aff79a78f40ef753f2f312f7fa14e7dfdfd263d5 · sha256:11e365caec16fb6c… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer