CVE-2026-23167

CVE-2026-23167 addresses a race condition in the Linux kernel's NFC (Near Field Communication) NCI (NFC Controller Interface) module. Specifically, it resolves an issue where the nci_dev.cmd_wq workqueue could be destroyed before nci_close_device() was called via rfkill, leading to a kernel splat. This vulnerability affects the Linux kernel, though specific versions are not detailed. The vulnerability's severity is moderate. It involves a race condition, which can be complex to reliably trigger. The potential impact is a kernel crash (splat), leading to denial of service for the affected system. No CVSS score is provided, but its FAUCET Risk Score is 20/100, indicating a relatively low risk. There is no evidence of active exploitation for CVE-2026-23167. No exploit code is publicly available on platforms like Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, suggesting low public attention and a lack of widespread exploitation.