CVE-2021-23134
Summary
| CVE | CVE-2021-23134 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-05-12 23:15:00 UTC |
| Updated | 2023-11-07 03:30:00 UTC |
| Description | Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP_NET_RAW capability. |
Risk And Classification
Problem Types: CWE-416
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Debian | Debian Linux | 9.0 | All | All | All |
| Operating System | Fedoraproject | Fedora | 33 | All | All | All |
| Operating System | Fedoraproject | Fedora | 34 | All | All | All |
| Operating System | Linux | Linux Kernel | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| FEDORA-2021-286375de1e | FEDORA | lists.fedoraproject.org | |
| [SECURITY] Fedora 33 Update: kernel-5.11.20-200.fc33 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| CVE-2021-23134 Linux Kernel Vulnerability in NetApp Products | NetApp Product Security | CONFIRM | security.netapp.com | |
| kernel/git/netdev/net.git - Netdev Group's networking tree | MISC | git.kernel.org | |
| [SECURITY] [DLA 2689-1] linux security update | MLIST | lists.debian.org | |
| [SECURITY] Fedora 33 Update: kernel-5.11.20-200.fc33 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| [SECURITY] Fedora 34 Update: kernel-tools-5.11.20-300.fc34 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] [DLA 2690-1] linux-4.19 security update | MLIST | lists.debian.org | |
| oss-security - CVE-2021-23134: Linux kernel: UAF in nfc sockets | MISC | www.openwall.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
LEGACY: Nadav Markus from Palo Alto Networks
LEGACY: Or Cohen from Palo Alto Networks
Legacy QID Mappings
- 159338 Oracle Enterprise Linux Security Update for Unbreakable Enterprise kernel (ELSA-2021-9404)
- 159339 Oracle Enterprise Linux Security Update for Unbreakable Enterprise kernel-container (ELSA-2021-9406)
- 159399 Oracle Enterprise Linux Security Update for Unbreakable Enterprise kernel (ELSA-2021-9452)
- 159400 Oracle Enterprise Linux Security Update for Unbreakable Enterprise kernel-container (ELSA-2021-9453)
- 178679 Debian Security Update for linux-4.19 (DLA 2690-1)
- 178680 Debian Security Update for linux (DLA 2689-1)
- 180133 Debian Security Update for linux (CVE-2021-23134)
- 198416 Ubuntu Security Notification for Linux kernel vulnerabilities (USN-4997-1)
- 198418 Ubuntu Security Notification for Linux kernel vulnerabilities (USN-5000-1)
- 198419 Ubuntu Security Notification for Linux kernel (OEM) vulnerabilities (USN-5001-1)
- 198425 Ubuntu Security Notification for Linux kernel (KVM) vulnerabilities (USN-5000-2)
- 198426 Ubuntu Security Notification for Linux kernel (KVM) vulnerabilities (USN-4997-2)
- 198437 Ubuntu Security Notification for Linux kernel vulnerabilities (USN-5016-1) (Sequoia)
- 198459 Ubuntu Security Notification for Linux, Linux-aws, Linux-aws-hwe, Linux-azure, Linux-azure-4.15, Linux-gcp, (USN-5018-1)
- 281159 Fedora Security Update for kernel (FEDORA-2021-05152dbcf5)
- 281160 Fedora Security Update for kernel (FEDORA-2021-286375de1e)
- 610384 Google Pixel Android December 2021 Security Patch Missing
- 610392 Google Android January 2022 Security Patch Missing for Huawei EMUI
- 670488 EulerOS Security Update for kernel (EulerOS-SA-2021-2246)
- 670514 EulerOS Security Update for kernel (EulerOS-SA-2021-2272)
- 670578 EulerOS Security Update for kernel (EulerOS-SA-2021-2336)
- 670634 EulerOS Security Update for kernel (EulerOS-SA-2021-2392)
- 750117 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:1891-1)
- 750118 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:1890-1)
- 750121 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:1888-1)
- 750125 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:1887-1)
- 750126 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:1889-1)
- 750139 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:1913-1)
- 750140 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:1912-1)
- 750171 OpenSUSE Security Update for the Linux Kernel (openSUSE-SU-2021:0843-1)
- 750650 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:1975-1)
- 750652 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:1977-1)
- 750673 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 17 for SLE 12 SP5) (SUSE-SU-2021:2067-1)
- 750674 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 18 for SLE 12 SP5) (SUSE-SU-2021:2020-1)
- 750676 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 13 for SLE 15 SP2) (SUSE-SU-2021:2027-1)
- 750678 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 24 for SLE 15) (SUSE-SU-2021:2057-1)
- 750741 OpenSUSE Security Update for the Linux Kernel (openSUSE-SU-2021:0947-1)
- 750762 OpenSUSE Security Update for the Linux Kernel (openSUSE-SU-2021:1977-1)
- 750766 OpenSUSE Security Update for the Linux Kernel (openSUSE-SU-2021:1975-1)
- 750864 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:2421-1)
- 750880 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:2451-1)
- 751688 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 37 for SLE 12 SP3) (SUSE-SU-2022:0325-1)
- 751689 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 39 for SLE 12 SP3) (SUSE-SU-2022:0327-1)
- 753087 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 22 for SLE 15) (SUSE-SU-2022:0255-1)
- 753211 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 11 for SLE 15 SP2) (SUSE-SU-2022:0291-1)
- 753257 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 23 for SLE 15) (SUSE-SU-2022:0243-1)
- 753272 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 16 for SLE 12 SP5) (SUSE-SU-2022:0234-1)
- 753292 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 0 for SLE 15 SP3) (SUSE-SU-2022:0293-1)
- 753408 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 15 for SLE 12 SP5) (SUSE-SU-2022:0263-1)
- 900096 CBL-Mariner Linux Security Update for kernel 5.10.52.1
- 900304 CBL-Mariner Linux Security Update for kernel 5.10.57.1
- 900319 CBL-Mariner Linux Security Update for kernel 5.10.60.1
- 901278 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (6531-1)
- 902883 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (4200)
- 906035 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (4200-1)