CVE-2026-23291
Use-After-Free in Linux Kernel NFC pn533 USB Interface on Disconnect
Publication date: 2026-03-25
Last updated on: 2026-04-18
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the Linux kernel's NFC driver for the pn533 device. When the device is disconnected from the driver, the USB interface reference that was acquired during the probe callback is not properly released. This results in a "dangling" reference count on the USB interface.
The issue is fixed by ensuring that the USB interface reference is properly dropped after it is no longer needed, preventing the dangling reference.
How can this vulnerability impact me? :
A dangling reference count on a USB interface can lead to resource leaks or instability in the kernel's handling of USB devices. This may cause unexpected behavior or crashes when the NFC device is disconnected.