The Linux kernel's NFC Low‑Layer Communication protocol contains a missing lock and unlink sequence in the DM handling path. An unprivileged local process can send a malformed DM message over an existing LLCP link, causing the socket to remain on the connecting list while in a closed state. This race results in list corruption and a reference‑count desynchronization that leaks kernel socket objects. The outcome is a gradual depletion of available kernel memory, leading to a DoS attack. The flaw is a use‑after‑free and race‑condition weakness (CWE-413).

Based on the description, it is inferred that all Linux kernel installations that have not incorporated the fix commit are affected. The advisory does not explicitly enumerate affected kernel versions; the vulnerability existed in mainline kernel generations serviced by the community and upstream vendors until the patch was applied.

The vulnerability requires local exploitation by a non‑privileged user with access to the NFC stack and a pre‑established LLCP link. The CVSS score of 4.7 indicates moderate severity. The EPSS score of <1% suggests a very low likelihood of exploitation, and KEV is not listed. Because it is a race condition, exploitation is not trivially deterministic; the risk is considered moderate to high for environments that rely on NFC functionality, with a potential for complete denial of kernel services once memory exhaustion occurs.