A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition between kobject creation and delete. This vulnerability allows a local attacker with CAP_NET_ADMIN privilege to leak kernel information.
CVE-2022-1974
CVSS base score
4.1 (v3.1)
Severity
MEDIUM
Attack vector
Local
Weakness
CWE-416, CWE-367
Last modified
November 2, 2026
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected products
linux linux kernel
References
- github.com Patch, Third Party Advisory
- github.com Patch, Third Party Advisory