A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed, leading to a privilege escalation problem.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 10, 2022 | Mar 10, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 25, 2022 |
| Suse | — | Upgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade dtb-amdUpgrade kernel-preempt-optionalUpgrade kernel-default-manUpgrade kernel-preempt-extraUpgrade kernel-default-kgraftUpgrade kernel-default-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-vanilla-develUpgrade dlm-kmp-preemptUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade dtb-freescaleUpgrade kernel-64kb-optionalUpgrade dlm-kmp-defaultUpgrade kernel-zfcpdump-manUpgrade dtb-renesasUpgrade kernel-docsUpgrade dtb-broadcomUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-baseUpgrade dtb-apmUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade gfs2-kmp-preemptUpgrade kernel-vanillaUpgrade kernel-debug-develUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade dtb-sprdUpgrade kernel-debugUpgrade kernel-preempt-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade dtb-marvellUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-preemptUpgrade kernel-azureUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade dtb-qcomUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-vanilla-livepatch-develUpgrade kselftests-kmp-preemptUpgrade dtb-zteUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade ocfs2-kmp-preemptUpgrade kselftests-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-develUpgrade dlm-kmp-64kbUpgrade kernel-default-develUpgrade dtb-exynosUpgrade kernel-azure-develUpgrade dtb-xilinxUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-baseUpgrade kernel-obs-buildUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade kernel-preemptUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kernel-vanilla-baseUpgrade kernel-preempt-develUpgrade kernel-debug-baseUpgrade kselftests-kmp-azureUpgrade dtb-mediatekUpgrade dtb-armUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-alUpgrade kernel-64kb-livepatch-develUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade dtb-alteraUpgrade kernel-default-base-rebuildUpgrade dtb-allwinnerUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-preemptUpgrade ocfs2-kmp-default | Jan 26, 2022 | Jan 25, 2022 |
| Ubuntu | — | Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-4.4.0-229-lowlatencyUpgrade linux-image-5.4.0-1066-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.11.0-1029-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.13.0-28-lowlatencyUpgrade linux-image-4.15.0-1120-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1131-azureUpgrade linux-image-5.4.0-100-genericUpgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-5.4.0-100-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1070-azureUpgrade linux-image-5.4.0-1015-ibmUpgrade linux-image-dell300xUpgrade linux-image-gkeop-5.4Upgrade linux-image-gkeopUpgrade linux-image-oemUpgrade linux-image-5.4.0-1053-raspiUpgrade linux-image-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1063-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1028-bluefieldUpgrade linux-image-raspiUpgrade linux-image-4.15.0-1035-dell300xUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-1110-kvmUpgrade linux-image-5.4.0-100-generic-lpaeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1064-oracleUpgrade linux-image-5.4.0-1065-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-169-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-5.11.0-1028-azureUpgrade linux-image-5.13.0-1029-oemUpgrade linux-image-4.4.0-1145-awsUpgrade linux-image-4.15.0-169-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.13.0-1016-raspi-nolpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1116-gcpUpgrade linux-image-5.13.0-28-generic-lpaeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-4.4.0-229-genericUpgrade linux-image-5.13.0-28-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-bluefieldUpgrade linux-image-azure-fdeUpgrade linux-image-5.13.0-28-generic-64kUpgrade linux-image-4.15.0-1087-oracleUpgrade linux-image-snapdragonUpgrade linux-image-5.13.0-1016-raspiUpgrade linux-image-5.13.0-1012-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1056-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1107-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.13.0-1013-gcpUpgrade linux-image-5.4.0-1070-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.11.0-1028-oracleUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1103-raspi2Upgrade linux-image-5.13.0-1011-kvmUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-169-genericUpgrade linux-image-5.13.0-1016-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1034-gkeopUpgrade linux-image-generic-hwe-16.04 | Feb 3, 2022 | Jan 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub