A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed, leading to a privilege escalation problem.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 10, 2022 | Mar 10, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 25, 2022 |
| Suse | — | Upgrade kgraft-patch-4_4_180-94_141-defaultUpgrade dtb-alUpgrade reiserfs-kmp-azureUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade dtb-qcomUpgrade kselftests-kmp-preemptUpgrade kernel-azureUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-default-develUpgrade cluster-md-kmp-preemptUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-caviumUpgrade kernel-preemptUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-preemptUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-kvmsmallUpgrade dtb-zteUpgrade kernel-64kb-livepatch-develUpgrade kernel-debug-baseUpgrade dtb-xilinxUpgrade kernel-64kbUpgrade kernel-vanilla-baseUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade kernel-preempt-develUpgrade dtb-exynosUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-vanilla-livepatch-develUpgrade dtb-lgUpgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade dtb-armUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-baseUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade kernel-zfcpdumpUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-preemptUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade kernel-vanilla-develUpgrade cluster-md-kmp-64kbUpgrade kernel-default-manUpgrade kernel-preempt-extraUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdump-manUpgrade gfs2-kmp-preemptUpgrade kernel-vanillaUpgrade dtb-freescaleUpgrade kernel-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-preempt-optionalUpgrade kernel-default-kgraftUpgrade kernel-default-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade dtb-nvidiaUpgrade dlm-kmp-preemptUpgrade kernel-default-livepatchUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade dtb-socionextUpgrade dtb-amdUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade dtb-marvellUpgrade kernel-preempt-livepatch-develUpgrade kernel-debugUpgrade dtb-amlogicUpgrade kernel-symsUpgrade dtb-sprdUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-apmUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-64kb-extra | Jan 26, 2022 | Jan 25, 2022 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1035-dell300xUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-1066-awsUpgrade linux-image-4.4.0-229-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-ibmUpgrade linux-image-5.11.0-1029-gcpUpgrade linux-image-5.4.0-1063-gkeUpgrade linux-image-5.13.0-1029-oemUpgrade linux-image-5.4.0-100-genericUpgrade linux-image-5.4.0-1053-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-4.15.0-1131-azureUpgrade linux-image-4.4.0-1145-awsUpgrade linux-image-generic-64kUpgrade linux-image-oemUpgrade linux-image-4.4.0-1110-kvmUpgrade linux-image-5.4.0-1015-ibmUpgrade linux-image-gkeop-5.4Upgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-100-lowlatencyUpgrade linux-image-5.4.0-1028-bluefieldUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-5.4.0-1064-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-dell300xUpgrade linux-image-5.4.0-1065-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-5.13.0-1016-raspi-nolpaeUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1070-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-169-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-100-generic-lpaeUpgrade linux-image-5.11.0-1028-azureUpgrade linux-image-5.13.0-28-lowlatencyUpgrade linux-image-4.15.0-169-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-4.15.0-1120-snapdragonUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1070-azure-fdeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.11.0-1028-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-5.13.0-1016-oracleUpgrade linux-image-5.13.0-28-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-1107-kvmUpgrade linux-image-4.15.0-1116-gcpUpgrade linux-image-5.13.0-28-genericUpgrade linux-image-snapdragonUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1103-raspi2Upgrade linux-image-5.13.0-1013-gcpUpgrade linux-image-4.15.0-1087-oracleUpgrade linux-image-bluefieldUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-5.4.0-1056-kvmUpgrade linux-image-5.13.0-28-generic-64kUpgrade linux-image-5.13.0-1016-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1034-gkeopUpgrade linux-image-5.13.0-1012-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.13.0-1011-kvmUpgrade linux-image-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-169-genericUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-229-generic | Feb 3, 2022 | Jan 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub