A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed, leading to a privilege escalation problem.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 10, 2022 | Mar 10, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 25, 2022 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade kernel-64kb-livepatch-develUpgrade dtb-armUpgrade dtb-alteraUpgrade kernel-default-develUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade kernel-debug-baseUpgrade kernel-sourceUpgrade dtb-mediatekUpgrade kernel-preemptUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-preempt-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-kvmsmall-baseUpgrade dtb-exynosUpgrade kernel-64kbUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-xilinxUpgrade reiserfs-kmp-preemptUpgrade gfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade dtb-alUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade dtb-rockchipUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-vanilla-baseUpgrade kernel-azure-optionalUpgrade kernel-develUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-preemptUpgrade cluster-md-kmp-preemptUpgrade kselftests-kmp-azureUpgrade dtb-qcomUpgrade dtb-zteUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade ocfs2-kmp-preemptUpgrade kernel-azureUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade dlm-kmp-preemptUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-preempt-livepatch-develUpgrade kernel-symsUpgrade dtb-amlogicUpgrade kernel-debugUpgrade dtb-sprdUpgrade dtb-socionextUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade kernel-obs-qaUpgrade kernel-vanilla-develUpgrade kernel-default-kgraftUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade dtb-marvellUpgrade kernel-vanillaUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-default-manUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade dtb-apmUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-preempt-extraUpgrade kernel-azure-baseUpgrade dlm-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-zfcpdump-manUpgrade gfs2-kmp-preemptUpgrade kernel-64kb-optionalUpgrade kernel-defaultUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade kernel-default-baseUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-default-extraUpgrade kselftests-kmp-defaultUpgrade kernel-preempt-optional | Jan 26, 2022 | Jan 25, 2022 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1116-gcpUpgrade linux-image-oracleUpgrade linux-image-5.13.0-1012-awsUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1107-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1070-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1087-oracleUpgrade linux-image-kvmUpgrade linux-image-4.4.0-229-genericUpgrade linux-image-5.11.0-1028-oracleUpgrade linux-image-5.13.0-1013-gcpUpgrade linux-image-5.13.0-28-generic-64kUpgrade linux-image-5.13.0-1016-raspiUpgrade linux-image-snapdragonUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-hweUpgrade linux-image-virtualUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1056-kvmUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-169-genericUpgrade linux-image-awsUpgrade linux-image-5.13.0-28-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1034-gkeopUpgrade linux-image-5.13.0-1016-oracleUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.13.0-28-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.13.0-1011-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1103-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-5.11.0-1028-azureUpgrade linux-image-4.15.0-169-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-4.15.0-1131-azureUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-100-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-100-genericUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.13.0-28-lowlatencyUpgrade linux-image-dell300xUpgrade linux-image-4.4.0-229-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1066-awsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.4.0-1110-kvmUpgrade linux-image-5.4.0-1028-bluefieldUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1064-oracleUpgrade linux-image-4.15.0-1035-dell300xUpgrade linux-image-azureUpgrade linux-image-5.4.0-1015-ibmUpgrade linux-image-5.4.0-100-generic-lpaeUpgrade linux-image-5.13.0-1029-oemUpgrade linux-image-4.15.0-169-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-ibmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.11.0-1029-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.13.0-1016-raspi-nolpaeUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1070-azureUpgrade linux-image-raspi2Upgrade linux-image-azure-lts-18.04Upgrade linux-image-gkeopUpgrade linux-image-4.15.0-1120-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1145-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1065-gcpUpgrade linux-image-5.4.0-1053-raspiUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1063-gkeUpgrade linux-image-generic-hwe-20.04 | Feb 3, 2022 | Jan 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub