Description

Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP_NET_RAW capability.

References

https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=c61760e6940d

https://www.openwall.com/lists/oss-security/2021/05/11/4

https://lists.fedoraproject.org/archives/list/[email protected]/message/QALNQT4LJFVSSA3MWCIECVY4AFPP4X77/

https://lists.fedoraproject.org/archives/list/[email protected]/message/LZYORWNQIHNWRFYRDXBWYWBYM46PDZEN/

https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html

https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html

https://security.netapp.com/advisory/ntap-20210625-0007/

Details

Risk Information

CVSS v2

CVSS v3