A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed, leading to a privilege escalation problem.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 10, 2022 | Mar 10, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 25, 2022 |
| Suse | — | Upgrade kernel-preemptUpgrade kernel-debug-baseUpgrade kernel-64kb-livepatch-develUpgrade dtb-mediatekUpgrade kernel-syms-azureUpgrade dtb-alteraUpgrade dtb-armUpgrade kselftests-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-zteUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-develUpgrade ocfs2-kmp-preemptUpgrade dtb-alUpgrade cluster-md-kmp-preemptUpgrade reiserfs-kmp-azureUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kselftests-kmp-preemptUpgrade dtb-rockchipUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade dtb-exynosUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-baseUpgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade kernel-source-vanillaUpgrade kernel-vanilla-baseUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-64kb-develUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade kernel-preempt-develUpgrade kernel-azureUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade dtb-caviumUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-preemptUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade dtb-allwinnerUpgrade kernel-default-develUpgrade kernel-default-manUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-azure-baseUpgrade dlm-kmp-defaultUpgrade kernel-preempt-extraUpgrade kernel-obs-qaUpgrade kernel-vanillaUpgrade kernel-default-extraUpgrade kernel-default-livepatch-develUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-preempt-optionalUpgrade kernel-defaultUpgrade kernel-default-livepatchUpgrade gfs2-kmp-preemptUpgrade kernel-zfcpdump-manUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-docsUpgrade reiserfs-kmp-64kbUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade kernel-debug-livepatch-develUpgrade dtb-nvidiaUpgrade dlm-kmp-preemptUpgrade cluster-md-kmp-defaultUpgrade kernel-vanilla-develUpgrade cluster-md-kmp-64kbUpgrade kernel-macrosUpgrade kernel-default-kgraftUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-preempt-livepatch-develUpgrade kernel-symsUpgrade dtb-sprdUpgrade dtb-marvellUpgrade kernel-debugUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade dtb-renesasUpgrade dtb-apmUpgrade kernel-kvmsmall-livepatch-devel | Jan 26, 2022 | Jan 25, 2022 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1053-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-ibmUpgrade linux-image-5.4.0-100-genericUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-169-generic-lpaeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1063-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1065-gcpUpgrade linux-image-4.15.0-1131-azureUpgrade linux-image-5.4.0-1028-bluefieldUpgrade linux-image-4.4.0-1145-awsUpgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1015-ibmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-dell300xUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-100-generic-lpaeUpgrade linux-image-5.13.0-1029-oemUpgrade linux-image-4.15.0-169-lowlatencyUpgrade linux-image-5.11.0-1028-azureUpgrade linux-image-5.4.0-100-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1035-dell300xUpgrade linux-image-5.4.0-1066-awsUpgrade linux-image-azureUpgrade linux-image-oem-20.04Upgrade linux-image-5.11.0-1029-gcpUpgrade linux-image-4.15.0-1120-snapdragonUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-4.4.0-1110-kvmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1064-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-raspiUpgrade linux-image-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-5.13.0-1016-raspi-nolpaeUpgrade linux-image-5.13.0-28-lowlatencyUpgrade linux-image-4.4.0-229-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1070-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1056-kvmUpgrade linux-image-4.15.0-1103-raspi2Upgrade linux-image-5.13.0-1016-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1034-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.11.0-1028-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.13.0-1016-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-awsUpgrade linux-image-5.13.0-28-generic-64kUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1070-azure-fdeUpgrade linux-image-5.13.0-1011-kvmUpgrade linux-image-4.15.0-1116-gcpUpgrade linux-image-5.13.0-1013-gcpUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-1087-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-snapdragonUpgrade linux-image-virtualUpgrade linux-image-4.15.0-169-genericUpgrade linux-image-gke-5.4Upgrade linux-image-aws-hweUpgrade linux-image-azure-fdeUpgrade linux-image-4.4.0-229-genericUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.13.0-28-generic-lpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-1109-awsUpgrade linux-image-5.13.0-1012-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.13.0-28-genericUpgrade linux-image-4.15.0-1107-kvm | Feb 3, 2022 | Jan 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub