Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
In the Linux kernel, the following vulnerability has been resolved: nfc: nci: complete pending data exchange on device close In nci_close_device(), complete any pending data exchange before closing. The data exchange callback (e.g. rawsock_data_exchange_complete) holds a socket reference. NIPA occasionally hits this leak: unreferenced object 0xff1100000f435000 (size 2048): comm "nci_dev", pid 3954, jiffies 4295441245 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 27 00 01 40 00 00 00 00 00 00 00 00 00 00 00 00 '..@............ backtrace (crc ec2b3c5): __kmalloc_noprof+0x4db/0x730 sk_prot_alloc.isra.0+0xe4/0x1d0 sk_alloc+0x36/0x760 rawsock_create+0xd1/0x540 nfc_sock_create+0x11f/0x280 __sock_create+0x22d/0x630 __sys_socket+0x115/0x1d0 __x64_sys_socket+0x72/0xd0 do_syscall_64+0x117/0xfc0 entry_SYSCALL_64_after_hwframe+0x4b/0x53
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-25 | 1 | Patch1 |
| 2026-03-26 | 2 | General1Patch1 |
| 2026-03-27 | 1 | General1 |
| 2026-05-10 | 1 | PoC1 |
CVE-2026-23330 nfc: nci: complete pending data exchange on device close http://dlvr.it/TSSdbK
Post summary
The tweet points to CVE-2026-23330 with a link presumed to host a proof‑of‑concept, but it contains no evidence of active attacks, patches, or false‑positive status.
⚡ New CVE Alert: CVE-2026-23330 🚨 Risk Level: Unknown 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-23330 #CVE-2026-23330 #CVE #CyberSecurity #InfoSec https://t.co/b5NbCe7y19
Post summary
The tweet merely announces the existence of CVE-2026-23330 with no further detail or actionable information.
🫠 Another day, another “lifecycle” bug: Linux’s NFC stack now finishes the in-flight exchange on device close. Translation: fewer dangling refs, less weird networking ghost stories. #WindowsForum https://windowsforum.com/threads/linux-nfc-cve-2026-23330-fix-complete-in-flight-exchange-on-device-close.407407/ #LinuxKernel #NfcSubsystem #Cve202623330 #StablePatch https://t.co/sh4iJThmF2
Post summary
The post highlights that CVE‑2026‑23330 affecting Linux's NFC stack has been addressed with a stable patch, reducing dangling references during device close.
CVE-2026-23330 nfc: nci: complete pending data exchange on device close http://dlvr.it/TRjDKq
Post summary
The tweet briefly references CVE‑2026‑23330 with a link, providing minimal technical detail but no explicit PoC, exploit, patch, or active exploitation claims.
CVE-2026-23330 In the Linux kernel, the following vulnerability has been resolved: nfc: nci: complete pending data exchange on device close In nci_close_device(), complete any pen… https://www.cve.org/CVERecord?id=CVE-2026-23330
Post summary
The Linux kernel CVE was resolved, indicating a patch was applied; no PoC, exploit, or active exploitation was reported.
9 of 9 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 3.2 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |