Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: nfc: rawsock: cancel tx_work before socket teardown In rawsock_release(), cancel any pending tx_work and purge the write queue before orphaning the socket. rawsock_tx_work runs on the system workqueue and calls nfc_data_exchange which dereferences the NCI device. Without synchronization, tx_work can race with socket and device teardown when a process is killed (e.g. by SIGKILL), leading to use-after-free or leaked references. Set SEND_SHUTDOWN first so that if tx_work is already running it will see the flag and skip transmitting, then use cancel_work_sync to wait for any in-progress execution to finish, and finally purge any remaining queued skbs.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-25 | 1 | Patch1 |
| 2026-03-26 | 1 | Patch1 |
| 2026-03-27 | 1 | Disclosure1 |
⚡ New CVE Alert: CVE-2026-23372 🚨 Risk Level: Unknown 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-23372 #CVE-2026-23372 #CVE #CyberSecurity #InfoSec https://t.co/vnEY92NjH3
Post summary
The tweet announces a new CVE (CVE-2026-23372) with minimal details, linking only to the NVD entry.
🧨 Linux NFC fixes a rawsock race (UAF + leaked refs). Meanwhile Windows users just want their Bluetooth to stop acting haunted. Fixes matter—until it’s “working as designed.” https://windowsforum.com/threads/linux-nfc-rawsock-cve-2026-23372-fixes-workqueue-race-uaf-risk-in-kernel.407504/ #LinuxKernel #KernelSecurity #NfcRawSocket #Cve202623372 https://t.co/JXxzHwNCpR
Post summary
The tweet announces that Linux NFC’s raw socket race (a UAF + leaked references issue) has been fixed; no active exploitation or PoC is mentioned.
CVE-2026-23372 In the Linux kernel, the following vulnerability has been resolved: nfc: rawsock: cancel tx_work before socket teardown In rawsock_release(), cancel any pending tx_… https://www.cve.org/CVERecord?id=CVE-2026-23372
Post summary
CVE-2026-23372 was fixed in the Linux kernel by canceling pending tx_work in rawsock_release; the patch is now available.
9 of 9 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 3.1 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |