Linux Kernel NFC CVE-2026-31629

Update to patched Linux kernel versions: 6.12.83, 6.18.24, 6.19.14, or 7.0.1 and later in respective stable branches. Upstream fixes are available in kernel.org git stable tree at commits 796e0cac058252d0ad34ebe288e6f7979b5fc9b2, 8977fad2b3c6eefd414131168d597c5d1d5e1abf, ff3d9e8f7244293e303f7b6ef70774291c7c27e9, and aba4712e8f0381cd5d196534ce2ad082626a5ab6. Distribution-specific advisories should be consulted for backported patches in enterprise kernels. If immediate patching is not feasible and NFC functionality is not required, disable the NFC subsystem entirely by blacklisting kernel modules (modprobe blacklist nfc, nfc_digital, nfc_llcp) or unloading them if already loaded (rmmod nfc_llcp nfc). This eliminates the vulnerable code path but renders all NFC functionality unavailable, which is acceptable for servers and workstations but breaks NFC-dependent workflows on mobile devices and payment terminals. For systems requiring NFC, restrict adjacent network access through network segmentation and ensure only trusted devices can communicate on the same network segment as NFC-enabled systems. Monitor for abnormal NFC traffic patterns or kernel warnings related to socket refcount errors. Note that disabling NFC modules may require kernel rebuild if compiled as built-in (=y) rather than module (=m). Enterprise environments should prioritize patching mobile device fleets and specialized NFC infrastructure (payment terminals, access control systems) over general server infrastructure where NFC is typically absent.