Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-31509

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix circular locking dependency in nci_close_device nci_close_device() flushes rx_wq and tx_wq while holding req_lock. This causes a circular locking dependency because nci_rx_work() running on rx_wq can end up taking req_lock too: nci_rx_work -> nci_rx_data_packet -> nci_data_exchange_complete -> __sk_destruct -> rawsock_destruct -> nfc_deactivate_target -> nci_deactivate_target -> nci_request -> mutex_lo
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:b0ac9c617db79f51f598ce6abea4bd91aa84d7647dbcd34a9530097368093df9
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/nfc/nci/core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"7ed00a3edc8597fe2333f524401e2889aa1b5edf","status":"affected","version":"6a2968aaf50c7a22fced77a5e24aa636281efca8","versionType":"git"},{"lessThan":"5eef9ebec7f5738f12cadede3545c05b34bf5ac3","status":"affected","version":"6a2968aaf50c7a22fced77a5e24aa636281efca8","versionType":"git"},{"lessThan":"ca54e904a071aa65ef3ad46ba42d51aaac6b73b4","status":"affected","version":"6a2968aaf50c7a22fced77a5e24…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7fb74c025fe43250b580e109a2a8dc677a813e1f8f75d06cc28739cff2c4fad6 · sha256:973ccfbca6c7939e… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/nfc/nci/core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.2"},{"lessThan":"3.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.168","versionType":"semver"},{"lessThanOrEq…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7fb74c025fe43250b580e109a2a8dc677a813e1f8f75d06cc28739cff2c4fad6 · sha256:973ccfbca6c7939e… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/nfc/nci/core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"7ed00a3edc8597fe2333f524401e2889aa1b5edf","status":"affected","version":"6a2968aaf50c7a22fced77a5e24aa636281efca8","versionType":"git"},{"lessThan":"5eef9ebec7f5738f12cadede3545c05b34bf5ac3","status":"affected","version":"6a2968aaf50c7a22fced77a5e24aa636281efca8","versionType":"git"},{"lessThan":"ca54e904a071aa65ef3ad46ba42d51aaac6b73b4","status":"affected","version":"6a2968aaf50c7a22fced77a5e24…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7fb74c025fe43250b580e109a2a8dc677a813e1f8f75d06cc28739cff2c4fad6 · sha256:973ccfbca6c7939e… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["net/nfc/nci/core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.2"},{"lessThan":"3.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.168","versionType":"semver"},{"lessThanOrEq…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7fb74c025fe43250b580e109a2a8dc677a813e1f8f75d06cc28739cff2c4fad6 · sha256:973ccfbca6c7939e… · /containers/cna/affected/1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/09143c0e8f3b03517e6233aad42f45c794d8df8e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7fb74c025fe43250b580e109a2a8dc677a813e1f8f75d06cc28739cff2c4fad6 · sha256:973ccfbca6c7939e… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/1edc12d2bbcb7a8d0f1088e6fccb9d8c01bb1289"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7fb74c025fe43250b580e109a2a8dc677a813e1f8f75d06cc28739cff2c4fad6 · sha256:973ccfbca6c7939e… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/4527025d440ce84bf56e75ce1df2e84cb8178616"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7fb74c025fe43250b580e109a2a8dc677a813e1f8f75d06cc28739cff2c4fad6 · sha256:973ccfbca6c7939e… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/5eef9ebec7f5738f12cadede3545c05b34bf5ac3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7fb74c025fe43250b580e109a2a8dc677a813e1f8f75d06cc28739cff2c4fad6 · sha256:973ccfbca6c7939e… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/7ed00a3edc8597fe2333f524401e2889aa1b5edf"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7fb74c025fe43250b580e109a2a8dc677a813e1f8f75d06cc28739cff2c4fad6 · sha256:973ccfbca6c7939e… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/ca54e904a071aa65ef3ad46ba42d51aaac6b73b4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7fb74c025fe43250b580e109a2a8dc677a813e1f8f75d06cc28739cff2c4fad6 · sha256:973ccfbca6c7939e… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/d89b74bf08f067b55c03d7f999ba0a0e73177eb3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7fb74c025fe43250b580e109a2a8dc677a813e1f8f75d06cc28739cff2c4fad6 · sha256:973ccfbca6c7939e… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/eb435d150ca74b4d40f77f1a2266f3636ed64a79"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7fb74c025fe43250b580e109a2a8dc677a813e1f8f75d06cc28739cff2c4fad6 · sha256:973ccfbca6c7939e… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer