cbcvebase.
CVE-2021-4202
published 2022-03-25

CVE-2021-4202: A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kernel. This flaw could allow a local…

PriorityP433high7CVSS 3.1
AVLACHPRLUINSUCHIHAH
EPSS
0.36%
28.4th percentile
A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed, leading to a privilege escalation problem.

Affected

22 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 5.15.5-1 (bookworm)linux 5.15.5-1 (bookworm)
linuxlinux_kernel
linuxlinux_kernel>= 0 < 5.10.84-15.10.84-1
linuxlinux_kernel>= 0 < 5.15.5-15.15.5-1
linuxlinux_kernel>= 0 < 5.15.5-15.15.5-1
linuxlinux_kernel>= 0 < 5.15.5-15.15.5-1
linuxlinux_kernel>= 0 < 4.15.0-169.1774.15.0-169.177
linuxlinux_kernel>= 0 < 5.4.0-100.1135.4.0-100.113
linuxlinux_kernel>= 0 < 4.4.0-229.2634.4.0-229.263
linuxlinux_kernel>= 3.2 < 4.4.2944.4.294
linuxlinux_kernel>= 4.10 < 4.14.2574.14.257
linuxlinux_kernel>= 4.15 < 4.19.2194.19.219
linuxlinux_kernel>= 4.20 < 5.4.1635.4.163
linuxlinux_kernel>= 4.5 < 4.9.2924.9.292
linuxlinux_kernel>= 5.11 < 5.15.55.15.5
linuxlinux_kernel>= 5.5.0 < 5.10.825.10.82
msrccbl2_kernel_5.15.37.1-2_on_cbl_mariner_2.0
msrccbl_mariner_1.0_arm
msrccbl_mariner_1.0_x64
msrccbl_mariner_2.0_arm
msrccbl_mariner_2.0_x64
msrccm1_kernel_5.10.111.1-1_on_cbl_mariner_1.0

CVSS provenance

nvdv3.17.0HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.9MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
osv7.8HIGH
vendor_ubuntu7.8HIGH
vendor_debian7.0LOW
vendor_msrc7.0HIGH
vendor_redhat7.0HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.