A missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c in the Linux kernel before 5.8.2 could be used by local attackers to create raw sockets, bypassing security mechanisms, aka CID-26896f01467a.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Jul 14, 2023 | Sep 24, 2020 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Sep 24, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-develUpgrade perfUpgrade python3-perfUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-sourceUpgrade kernel-headers | Nov 3, 2020 | Sep 24, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Nov 3, 2020 | Sep 24, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docs | Feb 7, 2021 | Sep 24, 2020 |
| Ubuntu | — | Upgrade linux-image-oemUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-120-lowlatencyUpgrade linux-image-4.15.0-1098-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1073-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-4.15.0-1057-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-virtualUpgrade linux-image-4.15.0-1077-kvmUpgrade linux-image-genericUpgrade linux-image-4.15.0-1085-awsUpgrade linux-image-4.15.0-1056-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1089-snapdragonUpgrade linux-image-4.15.0-120-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-121-genericUpgrade linux-image-4.15.0-1072-gkeUpgrade linux-image-4.15.0-1099-oemUpgrade linux-image-4.15.0-120-generic-lpaeUpgrade linux-image-4.15.0-121-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1086-gcpUpgrade linux-image-4.15.0-121-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-gke-4.15Upgrade linux-image-oracleUpgrade linux-image-4.15.0-1086-awsUpgrade linux-image-4.15.0-1099-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracle-lts-18.04 | Feb 25, 2021 | Sep 24, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 24, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub