In the Linux kernel, the following vulnerability has been resolved:
net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
Sili Luo reported a race in nfc_llcp_sock_get(), leading to UAF.
Getting a reference on the socket found in a lookup while holding a lock should happen before releasing the lock.
nfc_llcp_sock_get_sn() has a similar problem.
Finally nfc_llcp_recv_snl() needs to make sure the socket found by nfc_llcp_sock_from_sn() does not disappear.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade kernel-symsUpgrade dtb-amlogicUpgrade reiserfs-kmp-rtUpgrade kernel-devel-azureUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade kernel-64kbUpgrade kernel-obs-qaUpgrade cluster-md-kmp-azureUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-develUpgrade gfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade dtb-amdUpgrade dtb-xilinxUpgrade cluster-md-kmp-rtUpgrade kernel-default-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-rt-livepatch-develUpgrade kernel-debugUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-apmUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-azure-livepatch-develUpgrade kernel-develUpgrade kernel-macrosUpgrade dtb-renesasUpgrade kernel-kvmsmallUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-armUpgrade kernel-sourceUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade kernel-default-manUpgrade kernel-default-baseUpgrade kernel-azure-baseUpgrade dtb-broadcomUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-freescaleUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-rtUpgrade dtb-caviumUpgrade dtb-amazonUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade gfs2-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-source-rtUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade dtb-exynosUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade kernel-preempt-develUpgrade kernel-docs-htmlUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade dtb-socionextUpgrade dtb-rockchipUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade dtb-alteraUpgrade kernel-preemptUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade dtb-marvellUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade kernel-rt-extraUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-allwinner | Mar 14, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-oemUpgrade linux-image-4.15.0-1137-oracleUpgrade linux-image-4.4.0-261-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1168-gcpUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1183-azureUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1158-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1176-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1175-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-azureUpgrade linux-image-gkeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-1139-kvmUpgrade linux-image-4.4.0-261-genericUpgrade linux-image-gcpUpgrade linux-image-4.15.0-231-genericUpgrade linux-image-4.15.0-231-lowlatencyUpgrade linux-image-gcp-lts-18.04 | Nov 19, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub