NetSight
IP …
high7.8

CVE-2021-23134

Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges.

Impact

Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP_NET_RAW capability.

Affected products

VendorProductAffected versions
NetappCloud Backup
All versions
NetappH300s Firmware
All versions
NetappH500s Firmware
All versions
NetappH700s Firmware
All versions
NetappH410s Firmware
All versions
NetappH410c Firmware
All versions
NetappSolidfire Baseboard Management Controller Firmware
All versions
LinuxLinux Kernel
before 4.4.269
from 4.5 before 4.9.269
from 4.10 before 4.14.233
from 4.15 before 4.19.191
from 4.20 before 5.4.119
from 5.5 before 5.10.37
FedoraprojectFedora
Versions 33, 34
DebianDebian Linux
Version 9.0

Weakness classification

CWE-416

References