CVE-2020-26088: A missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c in the Linux kernel before 5.8.2 co...

Security readout for executives and security teams

CVE-2020-26088 is a Linux kernel flaw in NFC raw socket creation. A local user could create raw NFC sockets without the expected CAP_NET_RAW permission, bypassing a kernel security control. It is not a remote internet-facing issue from the provided evidence. Exposure is most likely on Linux systems running affected kernels or vendor kernels without the backported fix, especially where local untrusted users, workloads, or containers can reach NFC socket functionality. Treat this as a standard kernel security maintenance item with higher priority on shared Linux hosts. It is locally exploitable, not proven actively exploited in the provided sources, and should be closed through normal kernel patching. Mitigation focus: Apply the appropriate vendor Linux kernel security update.; Upgrade source-built kernels to include commit 26896f01467a or later fixed code.; Reboot systems after kernel updates so the fixed kernel is running..

Prepared

Jun 5, 2026, 14:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.