PT-2023-3975

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free flaw was found in the nfc llcp find local function in net/nfc/llcp core.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a...

SUSE CVE-2018-9518

In nfcllcpbuildsdreqtlv of llcpcommands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel...

SUSE CVE-2019-12818

An issue was discovered in the Linux kernel before 4.20.15. The nfcllcpbuildtlv function in net/nfc/llcpcommands.c may return NULL. If the caller does not check for this, it will trigger a NULL pointer dereference. This will cause denial of service. This affects nfcllcpbuildgb in net/nfc/llcpcore...

SUSE CVE-2019-17056

llcpsockcreate in net/nfc/llcpsock.c in the AFNFC network module in the Linux kernel through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-3a359798b176...

SUSE CVE-2020-25671

A vulnerability was found in Linux Kernel, where a refcount leak in llcpsockconnect causing use-after-free which might lead to privilege escalations...

SUSE CVE-2020-25672

A memory leak vulnerability was found in Linux kernel in llcpsockconnect...

SUSE CVE-2020-25673

A vulnerability was found in Linux kernel where non-blocking socket in llcpsockconnect leads to leak and eventually hanging-up the system...

SUSE CVE-2021-38208

net/nfc/llcpsock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service NULL pointer dereference and BUG by making a getsockname call after a certain type of failure of a bind call...

CVE-2022-20198

In llcpdlcprocconnectpdu of llcpdlc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure from the NFC stack with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2022-14426

Name of the Vulnerable Software and Affected Versions Android versions Android-12L Description In the llcp dlc proc connect pdu function of llcp dlc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure from the NFC stack with...

USN-5343-1 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

Yiqi Sun and Kevin Wang discovered that the cgroups implementation in the Linux kernel did not properly restrict access to the cgroups v1 releaseagent feature. A local attacker could use this to gain administrative privileges. CVE-2022-0492 It was discovered that the aufs file system in the Linux...

USN-5343-1: Linux kernel vulnerabilities

Yiqi Sun and Kevin Wang discovered that the cgroups implementation in the Linux kernel did not properly restrict access to the cgroups v1 releaseagent feature. A local attacker could use this to gain administrative privileges. CVE-2022-0492 It was discovered that the aufs file system in the Linux...

Ubuntu: Security Advisory (USN-4977-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: kernel

Issue Overview: A use-after-free flaw was found in the Linux kernel's NFC LLCP protocol implementation in the way the user performs manipulation with an unknown input for the llcpsockbind function. This flaw allows a local user to crash or escalate their privileges on the system. CVE-2020-25670 A...

DEBIAN-CVE-2021-38208

net/nfc/llcpsock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service NULL pointer dereference and BUG by making a getsockname call after a certain type of failure of a bind call...

OESA-2021-1279 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: there was a null pointer dereference in llcpsockgetname in net/nfc/llcpsock.c and reproduced it in linux-5.13.0-rc2. An unprivileged user can trigger this bug and cause denial of service. Root Cause After creating an nfc socket,...

PT-2021-29280

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 5.12.9 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel version...

PT-2021-29245

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 5.10.42 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel version...

PT-2021-25286

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.3 through 5.12.9 Description: The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel versio...

PT-2021-25251

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 5.10.42 Description The issue is related to a NULL pointer dereference in the llcp sock getname function after a failed connect. This problem was introduced in version v3.3 and is fixed in Linux Kernel version...