Description
Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP_NET_RAW capability.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- Debian / debian_linux9.0 – 9.0
- fedoraproject / fedora34 – 34
- fedoraproject / fedora33 – 33
- Linux / Linux kernel4.4.269
- Linux Kernel / Linux Kernelunspecified – 5.12.4
- NetApp / cloud_backup
- NetApp / h300s_firmware
- NetApp / h410c_firmware
- NetApp / h410s_firmware
- NetApp / h500s_firmware
- NetApp / h700s_firmware
- NetApp / solidfire_baseboard_management_controller_firmware
References
- MISChttps://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=c61760e6940d
- MAILING_LISThttps://www.openwall.com/lists/oss-security/2021/05/11/4
- MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZYORWNQIHNWRFYRDXBWYWBYM46PDZEN/
- MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QALNQT4LJFVSSA3MWCIECVY4AFPP4X77/
- MAILING_LISThttps://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
- MAILING_LISThttps://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
- MISChttps://security.netapp.com/advisory/ntap-20210625-0007/
Updated 19m ago · 8 sources