CVE-2021-23134CWE-416

Linux kernel llcp_sock_bind/connect use-after-free

High · published May 12, 2021

CVSS v3.1
7.8
EPSS
0%
Percentile
30.2
In the wild
Unconfirmed
What it is

Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP_NET_RAW capability.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00375 · 30.2th percentile
Weakness
CWE-416 · Use After Free
Published
2021-05-12T22:45Z
EPSS history
Timeline
  • 12 MAY 22:45Z
    Linux kernel llcp_sock_bind/connect use-after-free
    cvelistv5