PT-2021-4248
CVE-2021-23134
·
تاريخ النشر
2021-05-04
·
تاريخ التحديث
2025-10-02
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.12.4
Description
The issue is related to a Use After Free vulnerability in the NFC sockets of the Linux kernel. This vulnerability can be exploited by a local attacker to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP NET RAW capability. The vulnerability is associated with the use of memory after it has been freed.
Recommendations
For Linux kernel versions prior to 5.12.4, update to version 5.12.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of NFC sockets or disabling the CAP NET RAW capability for non-privileged users until a patch is applied.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾