תיאור (מקור, אנגלית)
Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP_NET_RAW capability.
מוצרים מושפעים
netapp: cloud backup; netapp: h300s firmware; netapp: h300s; netapp: h500s firmware; netapp: h500s; netapp: h700s firmware; netapp: h700s; netapp: h410s firmware; netapp: h410s; netapp: h410c firmware; netapp: h410c; netapp: solidfire baseboard management controller firmware; netapp: solidfire baseboard management controller; linux: linux kernel; fedoraproject: fedora
קישורים10
- git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/… Mailing ListPatchVendor Advisory
- git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/… Mailing ListPatchVendor Advisory
- www.openwall.com/lists/oss-security/2021/05/11/4 Mailing ListPatchThird Party Advisory
- www.openwall.com/lists/oss-security/2021/05/11/4 Mailing ListPatchThird Party Advisory
- lists.debian.org/debian-lts-announce/2021/06/msg00019.html Mailing ListThird Party Advisory
- lists.debian.org/debian-lts-announce/2021/06/msg00020.html Mailing ListThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists… Third Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists… Third Party Advisory
- security.netapp.com/advisory/ntap-20210625-0007/ Third Party Advisory
- lists.debian.org/debian-lts-announce/2021/06/msg00019.html Mailing ListThird Party Advisory
מדדים
- CVSS 3.1
-
7.8
HIGH
מקור הציון: CNA
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 0% אחוזון 32 · נכון ל-6 בנובמבר 2026
- CWE
- CWE-416
האם אפשר לנצל את הפגיעות הזו אצלכם?
עדכון אבטחה סוגר את הפרצה הידועה. בדיקת חדירות מראה לאן תוקף עדיין יכול להגיע — עם הוכחה.