7.8
High
CVE-2021-23134 Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their…
Description
Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP_NET_RAW capability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Kernel 5.12 | earliest → < 5.12.4 | 5.12.4 |
References
- git.kernel.org git.kernel.org
- www.openwall.com www.openwall.com
- FEDORA-2021-286375de1e lists.fedoraproject.org
- FEDORA-2021-05152dbcf5 lists.fedoraproject.org
- [debian-lts-announce] 20210623 [SECURITY] [DLA 2689-1] linux security update lists.debian.org
- [debian-lts-announce] 20210623 [SECURITY] [DLA 2690-1] linux-4.19 security update lists.debian.org
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified
Other CVEs of Linux Kernel
The 11 CVEs of Linux Kernel →
CVE-2022-2503
Dm-verity is used for extending root-of-trust to root filesystems
6.9
Medium
CVE-2022-2327
io_uring use work_flags to determine which identity need to grab from the calling process to make sure it is…
7.5
High
CVE-2021-22543
An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks…
8.7
High
CVE-2021-23133
A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege…
6.7
Medium