PT-2021-7315 · Linux+5 · Linux Kernel+5

Lin Ma · Published 2021-10-08 · Updated 2023-11-09 · CVE-2021-3760

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free vulnerability in the NFC stack of the Linux kernel can lead to a threat to confidentiality, integrity, and system availability. The vulnerability is related to the NFC controller interface (NCI) and can be exploited to elevate privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2021-3197

ALT-PU-2021-3220

ALT-PU-2021-3232

ALT-PU-2021-3233

ALT-PU-2021-3268

ALT-PU-2021-3270

ALT-PU-2021-3282

ALT-PU-2021-3309

ALT-PU-2021-3444

ALT-PU-2021-3451

ALT-PU-2021-3458

ALT-PU-2021-3468

ALT-PU-2021-3477

ALT-PU-2021-3563

ALT-PU-2021-3573

ALT-PU-2022-1054

ALT-PU-2022-2096

ALT-PU-2023-4894

BDU:2022-05646

CVE-2021-3760

DLA-2843-1

DLA-2941-1

DSA-5096-1

MGASA-2021-0507

MGASA-2021-0508

OESA-2021-1429

OPENSUSE-SU-2021:1477-1

OPENSUSE-SU-2021:3641-1

OPENSUSE-SU-2021:3675-1

OPENSUSE-SU-2021:3876-1

OPENSUSE-SU-2021_1460-1

OPENSUSE-SU-2021_1477-1

OPENSUSE-SU-2021_3641-1

OPENSUSE-SU-2021_3655-1

OPENSUSE-SU-2021_3675-1

OPENSUSE-SU-2021_3876-1

SUSE-SU-2021:3640-1

SUSE-SU-2021:3641-1

SUSE-SU-2021:3642-1

SUSE-SU-2021:3658-1

SUSE-SU-2021:3675-1

SUSE-SU-2021:3723-1

SUSE-SU-2021:3748-1

SUSE-SU-2021:3754-1

SUSE-SU-2021:3876-1

SUSE-SU-2021:3929-1

SUSE-SU-2021:3935-1

SUSE-SU-2021:3969-1

SUSE-SU-2021:3972-1

USN-5139-1

USN-5165-1

USN-5208-1

USN-5209-1

USN-5210-1

USN-5210-2

USN-5218-1

USN-5505-1

USN-5513-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 457

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb · Exploit
• 🔥 https://github.com/tr3ee/CVE-2022-23222 · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-0995 · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-25636 · Exploit
• 🔥 https://github.com/xkaneiki/CVE-2023-0386 · Exploit
• 🔥 https://github.com/Crusaders-of-Rust/CVE-2022-0185 · Exploit
• 🔥 https://github.com/randorisec/CVE-2022-34918-LPE-PoC · Exploit
• 🔥 https://github.com/veritas501/CVE-2022-34918 · Exploit
• 🔥 https://github.com/TurtleARM/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/plummm/CVE-2022-27666 · Exploit