3190 matches found
GSD-2022-1001658 nfc: nci: add flush_workqueue to prevent uaf
nfc: nci: add flushworkqueue to prevent uaf This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.35 by commit...
PT-2022-30438
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.190 Description The issue is related to a potential security vulnerability in the NFC NCI module. It was introduced in version v3.2 and fixed in version v5.4.190. The actual impact and attack plausibility ha...
PT-2022-29252
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.2 through 5.17.3 Description The issue is related to a potential security vulnerability in the NFC NCI module. It was introduced in version v3.2 and fixed in version v5.17.4. The actual impact and attack plausibility ha...
PT-2022-30230
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.112 Description The issue is related to a potential security vulnerability in the NFC NCI module. It was introduced in version v3.2 and fixed in version v5.10.112. The actual impact and attack plausibility...
PT-2022-29931
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.35 Description The issue is related to a potential security vulnerability in the NFC NCI module. It was introduced in version v3.2 and fixed in version v5.15.35. The actual impact and attack plausibility ha...
PT-2022-30569
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.239 Description The issue is related to a potential security vulnerability in the Linux Kernel's NFC subsystem, specifically in the nci module. The problem is described as a use-after-free UAF issue, which...
PT-2022-30738
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.311 Description The issue is related to a potential security vulnerability in the Linux Kernel's NFC subsystem, specifically in the nci module. The problem is associated with a use-after-free UAF condition...
Ubuntu 20.04 LTS : Linux kernel (OEM) vulnerabilities (USN-5381-1)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5381-1 advisory. David Bouman discovered that the netfilter subsystem in the Linux kernel did not properly validate passed user register indices. A local attacker could u...
USN-5381-1 linux-oem-5.14 vulnerabilities
David Bouman discovered that the netfilter subsystem in the Linux kernel did not properly validate passed user register indices. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2022-1015 It was discovered that the block layer subsystem in the...
USN-5381-1: Linux kernel (OEM) vulnerabilities
David Bouman discovered that the netfilter subsystem in the Linux kernel did not properly validate passed user register indices. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2022-1015 It was discovered that the block layer subsystem in the...
Important: kernel
Issue Overview: A buffer overflow flaw was found in the Linux kernel's NFC protocol functionality. This flaw allows a local user to crash or escalate their privileges on the system. CVE-2022-26490 A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and...
Important: kernel
Issue Overview: A buffer overflow flaw was found in the Linux kernel's NFC protocol functionality. This flaw allows a local user to crash or escalate their privileges on the system. CVE-2022-26490 A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and...
PT-2025-7987
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.0-rc2 Description A use-after-free bug has been identified in the Linux kernel's NFC subsystem, specifically in the nci device detachment process. This issue arises due to a race condition between the cleanu...
PT-2025-8438
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18-rc2 Description A use-after-free issue in the Linux kernel's NFC subsystem allows for potential exploitation. The nfc dev up function does not properly check if the rfkill object is unregistered before use,...
CVE-2021-39807
In handleNfcStateChanged of SecureNfcEnabler.java, there is a possible way to enable NFC from the Guest account due to a missing permission check. This could lead to local escalation of privilege from the Guest account with no additional execution privileges needed. User interaction is not needed...
Privilege escalation
In handleNfcStateChanged of SecureNfcEnabler.java, there is a possible way to enable NFC from the Guest account due to a missing permission check. This could lead to local escalation of privilege from the Guest account with no additional execution privileges needed. User interaction is not needed...
CVE-2021-39807
In handleNfcStateChanged of SecureNfcEnabler.java, there is a possible way to enable NFC from the Guest account due to a missing permission check. This could lead to local escalation of privilege from the Guest account with no additional execution privileges needed. User interaction is not needed...
CVE-2021-39807
CVE-2021-39807 describes a local elevation-of-privilege flaw in Android’s SecureNfcEnabler.java (handleNfcStateChanged) that allows enabling NFC from a Guest account due to a missing permission check. Affected products/versions include Android 10, 11, 12, and 12L. The impact is local privilege es...
CVE-2021-39807: Improper Privilege Management
In handleNfcStateChanged of SecureNfcEnabler.java, there is a possible way to enable NFC from the Guest account due to a missing permission check. This could lead to local escalation of privilege from the Guest account with no additional execution privileges needed. User interaction is not needed...