Vulnerability in Kernel: NULL ptr dereference in llcp_sock_getname() after failed connect
Summary
GSD-2021-1000815: nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect. Affects Kernel versions >= d646960f7986fefb460a2b062d5ccc8ccfeacc3a, < 0c4559736d9a4ec1ca58ba98ca34e7c4da4c422b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a fundamental component of the Linux operating system that provides core functionalities and acts as an interface between the hardware and software layers. It manages system resources, facilitates communication between different software components, and ensures the overall stability and security of the system. The vulnerability in question affects the Kernel's NFC (Near Field Communication) subsystem. NFC enables short-range wireless communication between devices, allowing them to exchange data or perform actions such as contactless payments. The vulnerability specifically impacts the llcp_sock_getname() function, which is responsible for retrieving the name of a Logical Link Control Protocol (LLCP) socket. When a connect operation fails, a NULL pointer dereference occurs in this function, leading to a potential system crash or other adverse consequences.
Vulnerability Detail
The vulnerability arises from a NULL pointer dereference in the llcp_sock_getname() function of the Kernel's NFC subsystem. This occurs when a connect operation fails, and the function attempts to retrieve the name of an LLCP socket. By exploiting this vulnerability, an attacker could potentially trigger a system crash or execute arbitrary code with elevated privileges. The impact and attack plausibility of this vulnerability have not been proven yet. The vulnerability was introduced in version v3.3 of the Linux Kernel by commit d646960f7986fefb460a2b062d5ccc8ccfeacc3a and has been fixed in version v5.12.10 by commit 0c4559736d9a4ec1ca58ba98ca34e7c4da4c422b.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can disable the NFC subsystem if it is not required for their system's functionality. This can be achieved by modifying the Kernel configuration and rebuilding it without NFC support. However, this workaround should only be considered temporary, as it does not address the root cause of the vulnerability and may limit the functionality of NFC-enabled devices.
Conclusion
In conclusion, the vulnerability in the Kernel's NFC subsystem, specifically in the llcp_sock_getname() function, poses a risk of system crashes or arbitrary code execution. It is crucial to update the Kernel to version v5.12.10 or later to mitigate this vulnerability. Disabling the NFC subsystem can serve as a temporary workaround, but it is advisable to address the root cause by applying the recommended fix. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel is a core component of the Linux operating system that manages system resources, facilitates communication between software components, and ensures system stability and security.
NFC (Near Field Communication) is a technology that enables short-range wireless communication between devices, allowing them to exchange data or perform actions such as contactless payments.
llcp_sock_getname() is a function in the Kernel's NFC subsystem that retrieves the name of a Logical Link Control Protocol (LLCP) socket.
Exploiting this vulnerability could lead to a system crash or the execution of arbitrary code with elevated privileges.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.12.10 or later. Alternatively, users can disable the NFC subsystem if it is not required for their system's functionality.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
