Permission check bug in net/nfc/rawsock.c
Summary
GSD-2021-1000826: net/nfc/rawsock.c: fix a permission check bug. Affects Kernel versions < c08e0be44759d0b5affc5888be4aa5e536873335. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is an open-source monolithic Unix-like computer operating system kernel. It provides the essential services to enable the execution of software on a computer system. The net/nfc/rawsock.c file is part of the Linux Kernel and is responsible for handling raw socket operations for Near Field Communication (NFC) devices. Raw sockets allow direct access to network protocols, bypassing normal protocol processing. This vulnerability in net/nfc/rawsock.c could potentially lead to unauthorized access or manipulation of NFC data.
Vulnerability Detail
The vulnerability in net/nfc/rawsock.c is related to a permission check bug. The specific details of the bug are not provided in the vulnerability report. However, it is mentioned that the bug has been fixed in Linux Kernel version v4.4.273 by commit c08e0be44759d0b5affc5888be4aa5e536873335. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to update to the fixed version of the Linux Kernel to mitigate any potential risks associated with this vulnerability.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The permission check bug in net/nfc/rawsock.c of the Linux Kernel has been fixed in version v4.4.273. It is crucial to update to the fixed version to ensure the security of your system. Regularly checking for updates and applying them promptly is recommended. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is not specified in the vulnerability report. However, since it is related to a permission check bug, it could potentially lead to unauthorized access or manipulation of NFC data.
You can use tools like Vulert (https://vulert.com) to check if your system is affected by this vulnerability. Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities in the software.
No specific workaround is mentioned in the vulnerability report. It is recommended to update the Linux Kernel to the fixed version to mitigate the vulnerability.
You can refer to the commit c08e0be44759d0b5affc5888be4aa5e536873335 in the Linux Kernel repository for more details about the fix.
The discoverer of this vulnerability is not mentioned in the vulnerability report.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
