QID 353159

a use-after-free flaw was found in the linux kernels nfc llcp protocol implementation in the way the user performs manipulation with an unknown input for the llcp_sock_bind() function.
This flaw allows a local user to crash or escalate their privileges on the system. (
( CVE-2020-25670) a use-after-free flaw was found in the linux kernels nfc llcp protocol implementation in the way the user triggers the llcp_sock_connect() function.
This flaw allows a local user to crash the system. (
( CVE-2020-25671) a memory leak in the linux kernels nfc llcp protocol implementation was found in the way a user triggers the llcp_sock_connect() function.
This flaw allows a local user to starve the resources, causing a denial of service. (
( CVE-2020-25672) a vulnerability was found in linux kernel where non-blocking socket in llcp_sock_connect() leads to leak and eventually hanging-up the system. (
( CVE-2020-25673) a use-after-free flaw was found in the linux kernels sctp socket functionality that triggers a race condition.
This flaw allows a local user to escalate their privileges on the system.
The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. (
( CVE-2021-23133) a vulnerability was discovered in retrieve_ptr_limit in kernel/bpf/verifier.c in the linux kernel mechanism to mitigate speculatively out-of-bounds loads (spectre mitigation).
In this flaw a local, special user privileged (cap_sys_admin) bpf program running on affected systems may bypass the protection, and execute speculatively out-of-bounds loads from the kernel memory.
This can be abused to extract contents of kernel memory via side-channel. (
( CVE-2021-3501)

Successful exploitation of this vulnerability could lead to a securitybreach or could affect integrity, availability, and confidentiality.