GSD-2021-1000440 net/nfc: fix use-after-free llcp_sock_bind/connect

net/nfc: fix use-after-free llcpsockbind/connect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.119 by commit...

UVI-2021-1000462 net/nfc: fix use-after-free llcp_sock_bind/connect

net/nfc: fix use-after-free llcpsockbind/connect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.191 by commit...

UVI-2021-1000478 net/nfc: fix use-after-free llcp_sock_bind/connect

net/nfc: fix use-after-free llcpsockbind/connect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.233 by commit...

UVI-2021-1000309 net/nfc: fix use-after-free llcp_sock_bind/connect

net/nfc: fix use-after-free llcpsockbind/connect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

GSD-2021-1000462 net/nfc: fix use-after-free llcp_sock_bind/connect

net/nfc: fix use-after-free llcpsockbind/connect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.191 by commit...

UVI-2021-1000490 net/nfc: fix use-after-free llcp_sock_bind/connect

net/nfc: fix use-after-free llcpsockbind/connect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.269 by commit...

UVI-2021-1000403 net/nfc: fix use-after-free llcp_sock_bind/connect

net/nfc: fix use-after-free llcpsockbind/connect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

GSD-2021-1000309 net/nfc: fix use-after-free llcp_sock_bind/connect

net/nfc: fix use-after-free llcpsockbind/connect This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

CVE-2021-3587

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-38208. Reason: This candidate is a reservation duplicate of CVE-2021-38208. Notes: All CVE users should reference CVE-2021-38208 instead of this candidate. All references and descriptions in this candidate have been removed t...

SUSE-SU-2021:1617-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-36312: Fixed an issue in virt/kvm/kvmmain.c that had a kvmiobusunregisterdev memory leak upon a kmalloc failure bnc1184509. - CVE-2021-29650: Fixed...

SUSE-SU-2021:1596-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP4 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-36312: Fixed an issue in virt/kvm/kvmmain.c that had a kvmiobusunregisterdev memory leak upon a kmalloc failure bnc1184509. - CVE-2021-29650: Fixed...

Linux Kernel Post-Release Reuse Vulnerability (CNVD-2021-34748)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A post-release reuse vulnerability exists in the nfc socket in Linux Kernel versions prior to 5.12.2. A local attacke...

SUSE SLES15 Security Update : kernel (SUSE-SU-2021:1573-1)

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-36312: Fixed an issue in virt/kvm/kvmmain.c that had a kvmiobusunregisterdev memory leak upon a kmalloc failure bnc1184509. CVE-2021-29650: Fixed an issue...

DEBIAN-CVE-2021-23134

Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAPNETRAW capability...

AZL-6531 CVE-2021-23134 affecting package kernel for versions less than 5.10.78.1-1

Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAPNETRAW capability...

CVE-2021-23134

Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAPNETRAW capability...

UBUNTU-CVE-2021-23134

Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAPNETRAW capability...

Design/Logic Flaw

Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAPNETRAW capability...

CVE-2021-23134

Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAPNETRAW capability...

CVE-2021-23134

CVE-2021-23134 is a Linux kernel NFC LLCP use-after-free in nfc sockets (pre-5.12.4). The issue arises from refcount handling during bind/connect fixes, enabling a local attacker with CAP_NET_RAW to trigger a crash or memory corruption. A related CVE discussion confirms the fix: after nfc_llcp_lo...