Vulnerability Description
Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP_NET_RAW capability.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netapp | Cloud Backup | - |
| Netapp | H300S Firmware | - |
| Netapp | H300S | - |
| Netapp | H500S Firmware | - |
| Netapp | H500S | - |
| Netapp | H700S Firmware | - |
| Netapp | H700S | - |
| Netapp | H410S Firmware | - |
| Netapp | H410S | - |
| Netapp | H410C Firmware | - |
| Netapp | H410C | - |
| Netapp | Solidfire Baseboard Management Controller Firmware | - |
| Netapp | Solidfire Baseboard Management Controller | - |
| Linux | Linux Kernel | < 4.4.269 |
| Fedoraproject | Fedora | 33 |
| Debian | Debian Linux | 9.0 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=c61760Mailing ListPatchVendor Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.htmlMailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00020.htmlMailing ListThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproThird Party Advisory
- https://security.netapp.com/advisory/ntap-20210625-0007/Third Party Advisory
- https://www.openwall.com/lists/oss-security/2021/05/11/4Mailing ListPatchThird Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=c61760Mailing ListPatchVendor Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.htmlMailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00020.htmlMailing ListThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproThird Party Advisory
- https://security.netapp.com/advisory/ntap-20210625-0007/Third Party Advisory
- https://www.openwall.com/lists/oss-security/2021/05/11/4Mailing ListPatchThird Party Advisory
FAQ
What is CVE-2021-23134?
CVE-2021-23134 is a vulnerability with a CVSS score of 7.8 (HIGH). Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privil...
How severe is CVE-2021-23134?
CVE-2021-23134 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-23134?
Check the references section above for vendor advisories and patch information. Affected products include: Netapp Cloud Backup, Netapp H300S Firmware, Netapp H300S, Netapp H500S Firmware, Netapp H500S.