CVE-2026-64011

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-64011
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64011.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-64011
Downstream
BELL (1)
DEBIAN (1)
openSUSE (1)
ROOT (1)
SUSE (119)
UBUNTU (1)
Related
openSUSE (1)
SUSE (119)
Published
2026-07-19T14:56:25Z
Modified
2026-10-10T17:27:34Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
nfc: llcp: Fix use-after-free in llcp_sock_release()
Details

In the Linux kernel, the following vulnerability has been resolved:

nfc: llcp: Fix use-after-free in llcp_sock_release()

llcp_sock_release() unconditionally unlinks the socket from the local sockets list. However, if the socket is still in connecting state, it is on the connecting list.

Fix this by checking the socket state and unlinking from the correct list.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64011.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b4011239a08e7e6c2c6e970dfa9e8ecb73139261
Fixed
89ba026747019ee643d29407435ddc118e6ca908
Fixed
fb29f6bbe433f3decad227588809636c25f2a287
Fixed
2dfdaaf7d933b676124aadec6698825e95f94fe9
Fixed
e00f50f8697724a6f1d2d35744c1332c9912dac5
Fixed
cdc17e09a636c7f936f771902535a7515a7608fc
Fixed
912ebc49d4406a17fe73e5671d674fbc2f6b2634
Fixed
bc421d0826dedbba37580a25405eafb599e76d42
Fixed
f4268b466190dae95a7585f69b4f1f8ad097632c
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3.10.10
Fixed
3.11
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
da989ee1c7702050741a551df6866cc1588f277b

Affected versions

v3.*
v3.10.10
v3.10.100
v3.10.101
v3.10.102
v3.10.103
v3.10.104
v3.10.105
v3.10.106
v3.10.107
v3.10.108
v3.10.11
v3.10.12
v3.10.13
v3.10.14
v3.10.15
v3.10.16
v3.10.17
v3.10.18
v3.10.19
v3.10.20
v3.10.21
v3.10.22
v3.10.23
v3.10.24
v3.10.25
v3.10.26
v3.10.27
v3.10.28
v3.10.29
v3.10.30
v3.10.31
v3.10.32
v3.10.33
v3.10.34
v3.10.35
v3.10.36
v3.10.37
v3.10.38
v3.10.39
v3.10.40
v3.10.41
v3.10.42
v3.10.43
v3.10.44
v3.10.45
v3.10.46
v3.10.47
v3.10.48
v3.10.49
v3.10.50
v3.10.51
v3.10.52
v3.10.53
v3.10.54
v3.10.55
v3.10.56
v3.10.57
v3.10.58
v3.10.59
v3.10.60
v3.10.61
v3.10.62
v3.10.63
v3.10.64
v3.10.65
v3.10.66
v3.10.67
v3.10.68
v3.10.69
v3.10.70
v3.10.71
v3.10.72
v3.10.73
v3.10.74
v3.10.75
v3.10.76
v3.10.77
v3.10.78
v3.10.79
v3.10.80
v3.10.81
v3.10.82
v3.10.83
v3.10.84
v3.10.85
v3.10.86
v3.10.87
v3.10.88
v3.10.89
v3.10.90
v3.10.91
v3.10.92
v3.10.93
v3.10.94
v3.10.95
v3.10.96
v3.10.97
v3.10.98
v3.10.99

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64011.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.11.0
Fixed
5.10.259
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.210
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.176
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.143
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.93
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.35
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.0.12

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64011.json"