Permission check bug in net/nfc/rawsock.c
Summary
GSD-2021-1000867: net/nfc/rawsock.c: fix a permission check bug. Affects Kernel versions < ec72482564ff99c6832d33610d9f8ab7ecc81b6d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is an open-source monolithic Unix-like computer operating system kernel. It provides the essential services to enable the execution of software on a computer. The net/nfc/rawsock.c file in the Kernel is responsible for handling raw socket operations for Near Field Communication (NFC) devices. NFC is a set of communication protocols that enable two electronic devices, one of which is usually a portable device such as a smartphone, to establish communication by bringing them within a few centimeters of each other. This vulnerability in net/nfc/rawsock.c allows for a permission check bypass, potentially leading to unauthorized access or privilege escalation.
Vulnerability Detail
The vulnerability in net/nfc/rawsock.c is due to a permission check bug. The specific details of the bug have not been provided, but it is mentioned that the bug allows for a permission check bypass. This means that an attacker may be able to perform certain operations or access resources without the necessary permissions. The impact of this vulnerability could vary depending on the specific operations or resources affected. It is important to note that the actual impact and attack plausibility have not been proven.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The permission check bug in net/nfc/rawsock.c of the Linux Kernel has the potential to allow unauthorized access or privilege escalation. It is crucial to update the Linux Kernel to version v4.19.195 or later to fix this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability could vary depending on the specific operations or resources affected. It may allow an attacker to perform certain operations or access resources without the necessary permissions, potentially leading to unauthorized access or privilege escalation.
There is no information provided regarding exploitation of this vulnerability in the wild. However, it is important to apply the fix as soon as possible to mitigate any potential risks.
The specific versions affected by this vulnerability have not been mentioned. However, it is stated that the vulnerability is fixed in Linux Kernel version v4.19.195. It is recommended to update to this version or later to ensure the vulnerability is patched.
No workaround has been mentioned for this vulnerability. It is recommended to update the Linux Kernel to the fixed version as soon as possible.
For more information about this vulnerability, you can refer to the source provided in the database_specific field of the vulnerability details: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1000xxx/GSD-2021-1000867.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
