PT-2021-28905

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.112 through 5.4.118 Description A use-after-free issue exists in the net/nfc component, specifically affecting llcp sock bind and connect functions. The actual impact and attack plausibility have not yet been proven...

PT-2021-28774

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.12.3 Description The issue is related to a use-after-free error in the llcp sock bind/connect function. This problem was introduced in version v5.12 and is fixed in version v5.12.4. The actual impact and...

DEBIAN-CVE-2020-25671

A vulnerability was found in Linux Kernel, where a refcount leak in llcpsockconnect causing use-after-free which might lead to privilege escalations...

DEBIAN-CVE-2020-25673

A vulnerability was found in Linux kernel where non-blocking socket in llcpsockconnect leads to leak and eventually hanging-up the system...

AZL-34855 CVE-2020-25672 affecting package kernel for versions less than 6.6.35.1-4

A memory leak vulnerability was found in Linux kernel in llcpsockconnect...

Linux kernel llcp_sock_bind/connect use-after-free

...

USN-4948-1 linux-oem-5.10 vulnerabilities

Ryota Shiga discovered that the eBPF implementation in the Linux kernel did not properly verify that a BPF program only reserved as much memory for a ring buffer as was allocated. A local attacker could use this to cause a denial of service system crash or execute arbitrary code. CVE-2021-3489...

USN-4948-1: Linux kernel (OEM) vulnerabilities

Ryota Shiga discovered that the eBPF implementation in the Linux kernel did not properly verify that a BPF program only reserved as much memory for a ring buffer as was allocated. A local attacker could use this to cause a denial of service system crash or execute arbitrary code. CVE-2021-3489...

Linux AF_NFC llcp_sock_create Buffer Overflow

The vulnerability of the llcpsockcreate function in the net/nfc/llcpsock.c module of the AFNFC module in the Linux operating system is related to a lack of mechanisms for standard permissions. Exploiting this vulnerability could allow an attacker to compromise data integrity...

CVE-2020-25671

A use-after-free flaw was found in the Linux kernel’s NFC LLCP protocol implementation in the way the user triggers the llcpsockconnect function. This flaw allows a local user to crash the system...

UBUNTU-CVE-2020-25670

A vulnerability was found in Linux Kernel where refcount leak in llcpsockbind causing use-after-free which might lead to privilege escalations...

UBUNTU-CVE-2020-25671

A vulnerability was found in Linux Kernel, where a refcount leak in llcpsockconnect causing use-after-free which might lead to privilege escalations...

PT-2020-16156 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability was found in the Linux kernel where a non-blocking socket in the llcp sock connect function leads to a leak and eventually causes the system to hang. Recommendations: A...

Unspecified vulnerability in Linux kernel (CNVD-2019-38532)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the llcpsockcreate function in the net/nfc/llcpsock.c file in the AFNFC network module in Linux kernel 5.3.2 and earlier. An attacke...

CVE-2019-17056

llcpsockcreate in net/nfc/llcpsock.c in the AFNFC network module in the Linux kernel through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-3a359798b176...

UBUNTU-CVE-2019-17056

llcpsockcreate in net/nfc/llcpsock.c in the AFNFC network module in the Linux kernel through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-3a359798b176...

PT-2019-5696

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.3.2 Description The issue is related to the llcp sock create function in the AF NFC network module, which does not properly enforce the CAP NET RAW capability. This means that unprivileged users can create a raw...

CVE-2018-9563

In llcputilparsecc of llcputil.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1...

PT-2019-11156

Name of the Vulnerable Software and Affected Versions: Android versions 7.0 through 9 Description: The issue is related to a possible out-of-bound read in the llcp util parse connect function of llcp util.cc due to a missing bounds check. This could lead to local information disclosure with no...

PT-2019-16123

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description The issue is related to a possible out-of-bound read in the llcp dlc proc rr rnr pdu function of llcp dlc.cc, due to a missing bounds check. This could lead to local information disclosure with no...