CVE-2021-23134 HIGH

CVE-2021-23134: Linux kernel llcp_sock_bind/connect use-after-free

Vendor Linux Kernel
Product Linux Kernel
Weakness CWE-416
Published May 12, 2021
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP_NET_RAW capability.

Key dates

02Disclosure timeline

May 12, 2021 CVE published
September 17, 2024 Record updated