Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: nfc: nci: free skb on nci_transceive early error paths nci_transceive() takes ownership of the skb passed by the caller, but the -EPROTO, -EINVAL, and -EBUSY error paths return without freeing it. Due to issues clearing NCI_DATA_EXCHANGE fixed by subsequent changes the nci/nci_dev selftest hits the error path occasionally in NIPA, and kmemleak detects leaks: unreferenced object 0xff11000015ce6a40 (size 640): comm "nci_dev", pid 3954, jiffies 4295441246 hex dump (first 32 bytes): 6b 6b 6b 6b 00 a4 00 0c 02 e1 03 6b 6b 6b 6b 6b kkkk.......kkkkk 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk backtrace (crc 7c40cc2a): kmem_cache_alloc_node_noprof+0x492/0x630 __alloc_skb+0x11e/0x5f0 alloc_skb_with_frags+0xc6/0x8f0 sock_alloc_send_pskb+0x326/0x3f0 nfc_alloc_send_skb+0x94/0x1d0 rawsock_sendmsg+0x162/0x4c0 do_syscall_64+0x117/0xfc0
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-25 | 1 | Disclosure1 |
| 2026-03-26 | 1 | General1 |
| 2026-03-27 | 1 | General1 |
⚡ New CVE Alert: CVE-2026-23339 🚨 Risk Level: Unknown 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-23339 #CVE-2026-23339 #CVE #CyberSecurity #InfoSec https://t.co/zEuTPHT53P
Post summary
The tweet merely announces the existence of CVE‑2026‑23339 with minimal details and an NVD link, providing no actionable information.
🧠 Kernel bug: nci_transceive grabs skb “ownership” then bails early on -EPROTO/-EINVAL/-EBUSY like it forgot cleanup. Small? Sure. Enjoy your slow memory leak. https://windowsforum.com/threads/cve-2026-23339-kernel-leak-nci_transceive-ownership-bug.407537/ #MemoryLeak #LinuxKernel #CveSecurity #NfcNci https://t.co/cZhEUvTCYH
Post summary
The post highlights a kernel memory‑leak bug in nci_transceive, describing technical details but offering no PoC, patch, or evidence of active exploitation.
CVE-2026-23339 In the Linux kernel, the following vulnerability has been resolved: nfc: nci: free skb on nci_transceive early error paths nci_transceive() takes ownership of the s… https://www.cve.org/CVERecord?id=CVE-2026-23339
Post summary
The text announces that CVE-2026-23339 has been resolved in the Linux kernel, but provides no further technical or exploit information.
9 of 9 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 3.2 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |