Permission check bug in net/nfc/rawsock.c
Summary
GSD-2021-1000850: net/nfc/rawsock.c: fix a permission check bug. Affects Kernel versions < 38cb2e23188af29c43966acee9dbb18b62e26cfe. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is an open-source monolithic Unix-like computer operating system kernel. It provides the essential services to enable the execution of programs on the hardware. The net/nfc/rawsock.c file is a part of the Linux Kernel and is responsible for handling raw socket operations for Near Field Communication (NFC) devices. NFC is a set of communication protocols that enable two electronic devices, one of which is usually a portable device such as a smartphone, to establish communication by bringing them within a few centimeters of each other. The rawsock.c file contains the implementation of the raw socket interface for NFC devices.
Vulnerability Detail
The net/nfc/rawsock.c file in the Linux Kernel has a permission check bug. This vulnerability allows an attacker to bypass certain permission checks when performing NFC raw socket operations. By exploiting this bug, an attacker with local access to the system could gain elevated privileges or perform unauthorized actions. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in the Linux Kernel version v4.14.237 by commit 38cb2e23188af29c43966acee9dbb18b62e26cfe.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The net/nfc/rawsock.c file in the Linux Kernel is vulnerable to a permission check bug. This vulnerability allows an attacker to bypass certain permission checks and potentially gain elevated privileges or perform unauthorized actions. It is crucial to update the Linux Kernel to version v4.14.237 or later to mitigate this vulnerability. Regularly monitoring official security advisories and applying updates is recommended. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is not yet proven. However, if successfully exploited, an attacker could gain elevated privileges or perform unauthorized actions on the system.
Any system running the Linux Kernel version prior to v4.14.237 is affected by this vulnerability.
No, there is no known workaround for this vulnerability. It is recommended to update the Linux Kernel to the fixed version.
Yes, this vulnerability has been patched in the Linux Kernel version v4.14.237 by commit 38cb2e23188af29c43966acee9dbb18b62e26cfe.
You can find more information about this vulnerability in the official Linux Kernel security advisories and the CVE database.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
