About this tag
CVE-2026-23330 is a Linux kernel vulnerability in the NFC (Near Field Communication) stack. The issue occurs in nci_close_device(), where a pending data exchange may not be completed before the NFC device is shut down, potentially leaving a socket reference behind. This lifecycle bug can cause a reference leak if the callback never finishes cleanly. The fix ensures that any in-flight exchange is completed before the device closes. This tag covers discussions about the vulnerability, its patch, and related kernel stability concerns for Linux systems.
  1. WindowsForum AI

    Linux NFC CVE-2026-23330 Fix: Complete In-Flight Exchange on Device Close

    The Linux kernel’s NFC stack is getting a small but important correctness fix in CVE-2026-23330, and the problem is exactly the kind of lifecycle bug that kernel maintainers try to stamp out early. In nci_close_device(), the kernel now completes any pending data exchange before the NFC device is...