Published: 08/08/2021 Updated: 21/09/2021

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P

net/nfc/llcp_sock.c in the Linux kernel prior to 5.12.10 allows local unprivileged users to cause a denial of service (NULL pointer dereference and BUG) by making a getsockname call after a certain type of failure of a bind call.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Several security issues were fixed in the Linux kernel ...

A flaw was found in the Linux kernels implementation of wifi fragmentation handling An attacker with the ability to transmit within the wireless transmission range of an access point can abuse a flaw where previous contents of wifi fragments can be unintentionally transmitted to another device (CVE-2020-24586) A flaw was found in the Linux kernel ...

net/nfc/llcp_sockc in the Linux kernel before 51210 allows local unprivileged users to cause a denial of service (NULL pointer dereference and BUG) by making a getsockname call after a certain type of failure of a bind call ...

CWE-476 https://github.com/torvalds/linux/commit/4ac06a1e013cf5fdd963317ffd3b968560f33bba https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.10 http://www.openwall.com/lists/oss-security/2021/08/17/1 http://www.openwall.com/lists/oss-security/2021/08/17/2 https://bugzilla.redhat.com/show_bug.cgi?id=1992810 http://www.openwall.com/lists/oss-security/2021/08/24/2 https://nvd.nist.gov https://ubuntu.com/security/notices/USN-5343-1

CVE-2021-38208

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect