In the Linux kernel, the following vulnerability has been resolved:
net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
Sili Luo reported a race in nfc_llcp_sock_get(), leading to UAF.
Getting a reference on the socket found in a lookup while holding a lock should happen before releasing the lock.
nfc_llcp_sock_get_sn() has a similar problem.
Finally nfc_llcp_recv_snl() needs to make sure the socket found by nfc_llcp_sock_from_sn() does not disappear.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Suse | — | Upgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade kernel-rt-extraUpgrade kernel-azure-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade kernel-preempt-develUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-baseUpgrade dlm-kmp-rtUpgrade dtb-broadcomUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade kernel-debug-vdsoUpgrade dtb-nvidiaUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade kernel-source-rtUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade kernel-rtUpgrade kernel-defaultUpgrade kernel-default-vdsoUpgrade kernel-azure-extraUpgrade kernel-rt-optionalUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-default-livepatchUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade dtb-amazonUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-qcomUpgrade kernel-preemptUpgrade dlm-kmp-64kbUpgrade kernel-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-develUpgrade dtb-hisiliconUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade dtb-mediatekUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade dtb-armUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade dtb-renesasUpgrade dtb-amdUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade kernel-debug-livepatch-develUpgrade kernel-debugUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-rtUpgrade dtb-apmUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade kernel-devel-rt | Mar 14, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1158-kvmUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1183-azureUpgrade linux-image-oracleUpgrade linux-image-aws-hweUpgrade linux-image-genericUpgrade linux-image-4.15.0-1168-gcpUpgrade linux-image-4.4.0-1176-awsUpgrade linux-image-4.15.0-1137-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-awsUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1175-awsUpgrade linux-image-4.4.0-261-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-261-genericUpgrade linux-image-4.15.0-231-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-231-genericUpgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-1139-kvmUpgrade linux-image-gcp-lts-18.04 | Nov 19, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub