In the Linux kernel, the following vulnerability has been resolved:

nfc: pn533: properly drop the usb interface reference on disconnect

When the device is disconnected from the driver, there is a "dangling"
reference count on the usb interface that was grabbed in the probe
callback. Fix this up by properly dropping the reference after we are
done with it.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00024.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
c46ee38620a2aa2b25b16bc9738ace80dbff76a4 affected < 7398d6570501edc55a50ece820f369ab3c1df2e7
c46ee38620a2aa2b25b16bc9738ace80dbff76a4 affected < d1f6d20b3c2642ec85ce6ea5da7155746c31c6d0
c46ee38620a2aa2b25b16bc9738ace80dbff76a4 affected < 7ff14eb070f0efecb2606f8d7aa01b77d188e886
c46ee38620a2aa2b25b16bc9738ace80dbff76a4 affected < 00477cab053dc4816b99141d8fcca7a479cfebeb
c46ee38620a2aa2b25b16bc9738ace80dbff76a4 affected < 4551d6cea00224ab65a0ef35e4e6da0e9c0a2d74
c46ee38620a2aa2b25b16bc9738ace80dbff76a4 affected < 12133a483dfa832241fbbf09321109a0ea8a520e
Linux Linux affected
Version Status Constraints
3.1 affected —
0 unaffected < 3.1
6.1.167 unaffected ≤ 6.1.*
6.6.130 unaffected ≤ 6.6.*
6.12.77 unaffected ≤ 6.12.*
6.18.17 unaffected ≤ 6.18.*
6.19.7 unaffected ≤ 6.19.*
7.0-rc2 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/00477cab053dc4816b99141d8fcca7a479cfebeb cve-icon cve-icon
https://git.kernel.org/stable/c/12133a483dfa832241fbbf09321109a0ea8a520e cve-icon cve-icon
https://git.kernel.org/stable/c/4551d6cea00224ab65a0ef35e4e6da0e9c0a2d74 cve-icon cve-icon
https://git.kernel.org/stable/c/7398d6570501edc55a50ece820f369ab3c1df2e7 cve-icon cve-icon
https://git.kernel.org/stable/c/7ff14eb070f0efecb2606f8d7aa01b77d188e886 cve-icon cve-icon
https://git.kernel.org/stable/c/d1f6d20b3c2642ec85ce6ea5da7155746c31c6d0 cve-icon cve-icon
History

Wed, 25 Mar 2026 10:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: properly drop the usb interface reference on disconnect When the device is disconnected from the driver, there is a "dangling" reference count on the usb interface that was grabbed in the probe callback. Fix this up by properly dropping the reference after we are done with it.
Title nfc: pn533: properly drop the usb interface reference on disconnect
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-03-25T10:26:49.634Z

Reserved: 2026-01-13T15:37:45.992Z

Link: CVE-2026-23291

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-03-25T11:16:24.197

Modified: 2026-03-25T15:41:33.977

Link: CVE-2026-23291

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.