NetSight
IP …
high7.0

CVE-2021-4202

A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kernel.

Impact

A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed, leading to a privilege escalation problem.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.2 before 4.4.294
from 4.5 before 4.9.292
from 4.10 before 4.14.257
from 4.15 before 4.19.219
from 4.20 before 5.4.163
from 5.5.0 before 5.10.82

Weakness classification

CWE-362CWE-416

References