CVE-2026-23291 — Improper Update of Reference Count in Linux
Severity
7.8HIGH
No vectorEPSS
0.0%
top 90.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 25
Description
In the Linux kernel, the following vulnerability has been resolved:
nfc: pn533: properly drop the usb interface reference on disconnect
When the device is disconnected from the driver, there is a "dangling"
reference count on the usb interface that was grabbed in the probe
callback. Fix this up by properly dropping the reference after we are
done with it.
Affected Packages5 packages
▶CVEListV5linux/linuxc46ee38620a2aa2b25b16bc9738ace80dbff76a4 — 7398d6570501edc55a50ece820f369ab3c1df2e7+6
🔴Vulnerability Details
3GHSA▶
GHSA-3m5v-fjjv-99m5: In the Linux kernel, the following vulnerability has been resolved:
nfc: pn533: properly drop the usb interface reference on disconnect
When the dev↗2026-03-25
OSV▶
CVE-2026-23291: In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: properly drop the usb interface reference on disconnect When the devic↗2026-03-25
📋Vendor Advisories
3Debian▶
CVE-2026-23291: linux - In the Linux kernel, the following vulnerability has been resolved: nfc: pn533:...↗2026