CVE record · CVE-2026-98580

nfc: llcp: Fix race condition in accept_queue lifecycle

No CVSS scoreEPSS 0.0022 · 12th percentile

Published by the CVE Program (CNA: Linux) at 18 Oct 2026, 15:18 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 50b78b2a6500d0e97c204c1b6c51df8c17358bbe to before 54adcabb0f1deef1bdae5fc64779ed6d442721c9 git
  • affected 50b78b2a6500d0e97c204c1b6c51df8c17358bbe to before 7c938aad5108382c6ad7453c4b5ee8ae3f3252ed git
  • affected 50b78b2a6500d0e97c204c1b6c51df8c17358bbe to before d2093a0981138876212bc5f473bdbfba0786e064 git
  • affected 50b78b2a6500d0e97c204c1b6c51df8c17358bbe to before 41256821762a7114906b178826d17098e2fa5992 git
  • affected 50b78b2a6500d0e97c204c1b6c51df8c17358bbe to before 53867f6acb1af7f12d6485fa8a2819318f89083b git
  • affected 50b78b2a6500d0e97c204c1b6c51df8c17358bbe to before da8a07757383614a8380a0f7dd54749d2687b82e git
  • affected 50b78b2a6500d0e97c204c1b6c51df8c17358bbe to before d5e1c92d09caed19f2988739695ce611a86ba6f8 git
  • affected 50b78b2a6500d0e97c204c1b6c51df8c17358bbe to before c3eef2f988a3db9690369d7cef9a3344dd9788d3 git
Other versions: unaffected
Linux Linux
  • affected 3.7
  • unaffected before 3.7 semver
  • unaffected 5.10.271 to 5.10.*, inclusive semver
  • unaffected 5.15.222 to 5.15.*, inclusive semver
  • unaffected 6.1.189 to 6.1.*, inclusive semver
  • unaffected 6.6.158 to 6.6.*, inclusive semver
  • unaffected 6.12.112 to 6.12.*, inclusive semver
  • unaffected 6.18.55 to 6.18.*, inclusive semver
  • unaffected 7.2.9 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-98580
CNA
Linux
Published
18 Oct 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0022, the 12th percentile, on 10 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 18 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.