llcp_sock_create in net/nfc/llcp_sock.c in the AF_NFC network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-3a359798b176.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jan 20, 2020 | Oct 1, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-debug-devel | Dec 4, 2019 | Oct 1, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfo | Nov 19, 2019 | Oct 1, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-headers | Nov 19, 2019 | Oct 1, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-source | Nov 28, 2019 | Oct 1, 2019 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-source-azureUpgrade kernel-ec2-extraUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade kernel-ec2-develUpgrade kernel-ec2Upgrade kernel-docsUpgrade kernel-default | Oct 29, 2019 | Oct 1, 2019 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-oemUpgrade linux-image-gkeUpgrade linux-image-4.4.0-168-genericUpgrade linux-image-4.15.0-1063-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-azureUpgrade linux-image-4.15.0-69-lowlatencyUpgrade linux-image-4.4.0-168-generic-lpaeUpgrade linux-image-gke-5.0Upgrade linux-image-5.0.0-1027-oem-osp1Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-168-powerpc-e500mcUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.0.0-35-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1058-awsUpgrade linux-image-4.4.0-168-powerpc64-embUpgrade linux-image-4.4.0-168-powerpc64-smpUpgrade linux-image-4.15.0-1029-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-4.4.0-168-lowlatencyUpgrade linux-image-5.0.0-1025-gkeUpgrade linux-image-4.15.0-1050-kvmUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.0.0-1022-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1049-gcpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.0.0-1007-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1062-kvmUpgrade linux-image-5.0.0-1021-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1098-awsUpgrade linux-image-aws-hweUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.0.0-35-lowlatencyUpgrade linux-image-5.0.0-1022-raspi2Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-1054-awsUpgrade linux-image-gke-4.15Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-69-genericUpgrade linux-image-4.4.0-168-powerpc-smpUpgrade linux-image-4.15.0-69-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1063-oemUpgrade linux-image-4.15.0-1048-gkeUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.0.0-1025-gcpUpgrade linux-image-5.0.0-35-genericUpgrade linux-image-oracleUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.0.0-1025-azureUpgrade linux-image-generic-lpae-lts-xenial | Nov 14, 2019 | Oct 1, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 1, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub