VulnSocial

CVE-2026-46267Patch(linux / linux_kernel)

LOWCVSS 7.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch linux linux_kernel systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: nfc: hci: shdlc: Stop timers and work before freeing context llc_shdlc_deinit() purges SHDLC skb queues and frees the llc_shdlc structure while its timers and state machine work may still be active. Timer callbacks can schedule sm_work, and sm_work accesses SHDLC state and the skb queues. If teardown happens in parallel with a queued/running work item, it can lead to UAF and other shutdown races. Stop all SHDLC timers and cancel sm_work synchronously before purging the queues and freeing the context. Found by Linux Verification Center (linuxtesting.org) with SVACE.

linux CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Patch / fix
Weakness type (CWE)
CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_kernel

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 1 classified signal
  • Peaked at 2 mentions on most recent observed day (2026-06-04)
  • 3 total mentions across 2 days

Affected systems

Vendors
linux
Products
linux_kernel

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-06-03: 1Mentions · 2026-06-04: 2Patch / Workaround · 2026-06-04: 1Technical Details · 2026-06-03: 1Technical Details · 2026-06-04: 206-0306-04
Signal classification2 categories
Patch
266.7%
Disclosure
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-06-031
Disclosure1
2026-06-042
Patch2
Full discourse3 posts
  • Infoflowcloud@infoflowcloud
    Patch

    🚨*CVE* CVE-2026-46267 In the Linux kernel, the following vulnerability has been resolved: nfc: hci: shdlc: Stop timers and work before freeing context llc_shdlc_deinit() purges SHDLC skb… https://www.cve.org/CVERecord?id=CVE-2026-46267 ----- Traducción: CVE-2026-46267 En … http://infoflow.cloud`

    Post summary

    CVE‑2026‑46267, an issue in the Linux kernel, has been fixed; no PoC, exploit, or active abuse is reported.

    0000047
    79 followersView on X
  • CVE@CVEnew
    Patch

    CVE-2026-46267 In the Linux kernel, the following vulnerability has been resolved: nfc: hci: shdlc: Stop timers and work before freeing context llc_shdlc_deinit() purges SHDLC skb… https://www.cve.org/CVERecord?id=CVE-2026-46267

    Post summary

    The CVE-2026-46267 issue in the Linux kernel has been resolved, but no explicit patch details or advisory are provided.

    00000272
    57.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-46267 Use-After-Free Vulnerability in Linux Kernel NFC HCI SHDLC Timer Handling https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-46267

    Post summary

    An announcement of a use‑after‑free bug in the Linux Kernel NFC HCI SHDLC timer handling; no proof of concept, exploit, patch, or active exploitation is described.

    0000038
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---

Explore more

Back to dashboardlinux CVEslinux_kernel vulnerabilities