CVEvulnerability
CVE-2021-23134
7.8 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2021-05-12
- Last modified
- 2026-07-30
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-416
Description
Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP_NET_RAW capability.
Affected configurations
• netapp cloud backup
• netapp h300s firmware
• netapp h500s firmware
• netapp h700s firmware
• netapp h410s firmware
• netapp h410c firmware
• netapp solidfire baseboard management controller firmware
• linux linux kernel (< 4.4.269)
• linux linux kernel (>= 4.5 < 4.9.269)
• linux linux kernel (>= 4.10 < 4.14.233)
• linux linux kernel (>= 4.15 < 4.19.191)
• linux linux kernel (>= 4.20 < 5.4.119)
• linux linux kernel (>= 5.5 < 5.10.37)
• linux linux kernel (>= 5.11 < 5.11.21)
• linux linux kernel (>= 5.12 < 5.12.4)
• fedoraproject fedora 33
• fedoraproject fedora 34
• debian debian linux 9.0
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=c61760e6940d Mailing List, Patch, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZYORWNQIHNWRFYRDXBWYWBYM46PDZEN/ Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QALNQT4LJFVSSA3MWCIECVY4AFPP4X77/ Third Party Advisory
- https://security.netapp.com/advisory/ntap-20210625-0007/ Third Party Advisory
- https://www.openwall.com/lists/oss-security/2021/05/11/4 Mailing List, Patch, Third Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=c61760e6940d Mailing List, Patch, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZYORWNQIHNWRFYRDXBWYWBYM46PDZEN/ Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QALNQT4LJFVSSA3MWCIECVY4AFPP4X77/ Third Party Advisory
- https://security.netapp.com/advisory/ntap-20210625-0007/ Third Party Advisory
- https://www.openwall.com/lists/oss-security/2021/05/11/4 Mailing List, Patch, Third Party Advisory