In the Linux kernel, the following vulnerability has been resolved:
net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
Sili Luo reported a race in nfc_llcp_sock_get(), leading to UAF.
Getting a reference on the socket found in a lookup while holding a lock should happen before releasing the lock.
nfc_llcp_sock_get_sn() has a similar problem.
Finally nfc_llcp_recv_snl() needs to make sure the socket found by nfc_llcp_sock_from_sn() does not disappear.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatchUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-64kbUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade reiserfs-kmp-rtUpgrade dtb-amdUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade dtb-mediatekUpgrade kernel-kvmsmallUpgrade dlm-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade dtb-armUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-64kb-livepatch-develUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade dtb-apmUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade dtb-amlogicUpgrade kernel-develUpgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-default-develUpgrade kernel-syms-rtUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-devel-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-socionextUpgrade kernel-source-vanillaUpgrade dtb-amazonUpgrade kernel-default-manUpgrade dtb-qcomUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azureUpgrade dtb-appleUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-preempt-develUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-default-base-rebuildUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-exynosUpgrade kernel-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-azure-extraUpgrade kernel-debug-vdsoUpgrade dtb-alteraUpgrade kernel-defaultUpgrade kernel-preemptUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade kernel-rt_debugUpgrade kernel-source-azureUpgrade kernel-default-baseUpgrade kernel-azure-baseUpgrade kernel-64kb-extraUpgrade dtb-broadcomUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azure | Mar 14, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-4.15.0-231-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1139-kvmUpgrade linux-image-4.15.0-231-lowlatencyUpgrade linux-image-4.4.0-261-genericUpgrade linux-image-gkeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-aws-hweUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-261-lowlatencyUpgrade linux-image-4.15.0-1158-kvmUpgrade linux-image-4.15.0-1168-gcpUpgrade linux-image-4.15.0-1183-azureUpgrade linux-image-genericUpgrade linux-image-4.4.0-1176-awsUpgrade linux-image-oemUpgrade linux-image-lowlatencyUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1138-awsUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-4.15.0-1137-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1175-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-aws-lts-18.04 | Nov 19, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub