nfc llcp

About this tag
The nfc llcp tag on WindowsForum.com covers discussions about the Linux kernel's NFC Logical Link Control Protocol implementation, particularly a security vulnerability tracked as CVE-2026-31629. This flaw involves a missing return statement in the NFC LLCP receive path, leading to a double release, reference count underflow, and potential use-after-free condition. While the NFC LLCP subsystem is niche, the vulnerability underscores how edge hardware support can introduce real-world security risks in Linux systems. Content under this tag focuses on kernel memory safety, Linux security exposure, and the implications of privileged code bugs in NFC-related kernel modules.
  1. CVE-2026-31629: Missing return in Linux NFC LLCP can trigger double release UAF

    CVE-2026-31629 is a small Linux kernel flaw with a familiar lesson: in privileged code, a missing return can become a memory-safety vulnerability. The issue sits in the kernel’s NFC LLCP receive path, where two functions clean up a closed socket but then continue executing and repeat the...