CVE-2021-23134

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.12.4

Description The issue is related to a Use After Free vulnerability in the NFC sockets of the Linux kernel. This vulnerability can be exploited by a local attacker to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP NET RAW capability. The vulnerability is associated with the use of memory after it has been freed.

Recommendations For Linux kernel versions prior to 5.12.4, update to version 5.12.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of NFC sockets or disabling the CAP NET RAW capability for non-privileged users until a patch is applied.