VULNERABILITY INTELLIGENCE

CVE-2021-23134

CVSS score7.8 HIGH

EPSS probability0.38%

CISA KEVNot currently listed

Published2021-05-12

Last modified2026-07-30

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP_NET_RAW capability.

Weakness classification

psirt@paloaltonetworks.com: CWE-416
nvd@nist.gov: CWE-416

Primary references

psirt@paloaltonetworks.com — Mailing List, Patch, Vendor Advisory
psirt@paloaltonetworks.com — Mailing List, Third Party Advisory
psirt@paloaltonetworks.com — Mailing List, Third Party Advisory
psirt@paloaltonetworks.com — Third Party Advisory
psirt@paloaltonetworks.com — Third Party Advisory
psirt@paloaltonetworks.com — Third Party Advisory
psirt@paloaltonetworks.com — Mailing List, Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory