A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed, leading to a privilege escalation problem.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Mar 10, 2022 | Mar 10, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 25, 2022 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-preempt-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-default-manUpgrade dlm-kmp-preemptUpgrade dlm-kmp-defaultUpgrade kernel-preempt-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-default-livepatch-develUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade dtb-sprdUpgrade kernel-debugUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-default-baseUpgrade dtb-freescaleUpgrade dtb-amdUpgrade ocfs2-kmp-azureUpgrade kernel-vanillaUpgrade dtb-renesasUpgrade kernel-azure-baseUpgrade dtb-apmUpgrade reiserfs-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-optionalUpgrade dtb-marvellUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-zfcpdump-manUpgrade dtb-hisiliconUpgrade kernel-obs-qaUpgrade kernel-vanilla-develUpgrade dtb-nvidiaUpgrade gfs2-kmp-preemptUpgrade kernel-default-kgraftUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-debug-develUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-azureUpgrade kernel-preempt-develUpgrade dtb-alUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade dtb-exynosUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-debug-baseUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-preemptUpgrade kernel-default-develUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kernel-preemptUpgrade dtb-armUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade dtb-lgUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-64kb-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-sourceUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-preemptUpgrade kernel-azure-optionalUpgrade kernel-develUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade dtb-zteUpgrade dtb-alteraUpgrade dtb-mediatekUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-azureUpgrade dtb-qcomUpgrade cluster-md-kmp-preemptUpgrade kernel-azure-develUpgrade kernel-kvmsmall-baseUpgrade kernel-vanilla-baseUpgrade kselftests-kmp-preemptUpgrade dtb-caviumUpgrade dtb-rockchipUpgrade gfs2-kmp-azure | Jan 26, 2022 | Jan 25, 2022 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1065-gcpUpgrade linux-image-4.4.0-1145-awsUpgrade linux-image-5.4.0-1053-raspiUpgrade linux-image-azure-lts-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.11.0-1028-azureUpgrade linux-image-5.4.0-1015-ibmUpgrade linux-image-4.15.0-1120-snapdragonUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-dell300xUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-169-generic-lpaeUpgrade linux-image-5.13.0-1029-oemUpgrade linux-image-5.4.0-100-genericUpgrade linux-image-oem-osp1Upgrade linux-image-oemUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1070-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.13.0-28-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.4.0-1110-kvmUpgrade linux-image-5.11.0-1029-gcpUpgrade linux-image-5.4.0-100-generic-lpaeUpgrade linux-image-4.4.0-229-lowlatencyUpgrade linux-image-4.15.0-169-lowlatencyUpgrade linux-image-5.4.0-1066-awsUpgrade linux-image-5.4.0-100-lowlatencyUpgrade linux-image-5.4.0-1064-oracleUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1028-bluefieldUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-5.13.0-1016-raspi-nolpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1131-azureUpgrade linux-image-5.4.0-1063-gkeUpgrade linux-image-genericUpgrade linux-image-ibmUpgrade linux-image-gcpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-1035-dell300xUpgrade linux-image-oem-20.04cUpgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-229-genericUpgrade linux-image-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.13.0-1011-kvmUpgrade linux-image-5.13.0-28-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-aws-lts-20.04Upgrade linux-image-aws-hweUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-169-genericUpgrade linux-image-5.13.0-1016-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-4.15.0-1103-raspi2Upgrade linux-image-4.15.0-1087-oracleUpgrade linux-image-snapdragonUpgrade linux-image-5.13.0-1013-gcpUpgrade linux-image-4.15.0-1107-kvmUpgrade linux-image-5.4.0-1056-kvmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1034-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.13.0-1016-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.13.0-28-generic-64kUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.11.0-1028-oracleUpgrade linux-image-5.4.0-1070-azure-fdeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1116-gcpUpgrade linux-image-5.13.0-1012-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.13.0-28-generic-lpae | Feb 3, 2022 | Jan 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub