CVE-2021-4202

Published: 25/03/2022 Updated: 07/11/2023

CVSS v2 Base Score: 6.9 | Impact Score: 10 | Exploitability Score: 3.4

CVSS v3 Base Score: 7 | Impact Score: 5.9 | Exploitability Score: 1

VMScore: 614

Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

It exists that the NFC subsystem in the Linux kernel contained a use-after-free vulnerability in its NFC Controller Interface (NCI) implementation. A local attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2021-3760) ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2020-29374 Jann Horn of Google reported a flaw in Linux's virtual memory management A parent and child process initially share all their memory, but when either writes to a shared page, ...

Several security issues were fixed in the Linux kernel ...

Hi all, This post is the exploit overview of CVE-2021-4202 We successfully exploited this vulnerability to obtain full root privileges on default installations of Ubuntu 2004 *Exploit overview* 1 We create a lot of BPF ringbufs, and choose one of them as victim The BPF_FUNC_ringbuf_reserve allow us to have a pointer A to the beginnin ...

CWE-362 CWE-416 https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=86cdf8e38792545161dbe3350a7eced558ba4d15 https://bugzilla.redhat.com/show_bug.cgi?id=2036682 https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=3e3b5dfcd16a3e254aab61bd1e8c417dd4503102 https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=48b71a9e66c2eab60564b1b1c85f4928ed04e406 https://security.netapp.com/advisory/ntap-20220513-0002/http://www.openwall.com/lists/oss-security/2022/06/01/2 http://www.openwall.com/lists/oss-security/2022/06/04/2 http://www.openwall.com/lists/oss-security/2022/06/07/2 https://nvd.nist.gov https://www.debian.org/security/2022/dsa-5096 https://ubuntu.com/security/notices/USN-5298-1 https://ubuntu.com/security/notices/USN-5513-1

CVE-2021-4202

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

References

Vulmon Search

About

Products

Connect