Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() Sili Luo reported a race in nfc_llcp_sock_get(), leading to UAF. Getting a reference on the socket found in a lookup while holding a lock should happen before releasing the lock. nfc_llcp_sock_get_sn() has a similar problem. Finally nfc_llcp_recv_snl() needs to make sure the socket found by nfc_llcp_sock_from_sn() does not disappear.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 8f50020ed9b81ba909ce9573f9d05263cdebf502 before e863f5720a5680e50c4cecf12424d7cc31b3eb0a; affected 8f50020ed9b81ba909ce9573f9d05263cdebf502 before 7adcf014bda16cdbf804af5c164d94d5d025db2d; affected 8f50020ed9b81ba909ce9573f9d05263cdebf502 before 6ac22ecdaad2ecc662048f8c6b0ceb1ca0699ef9; affected 8f50020ed9b81ba909ce9573f9d05263cdebf502 before d888d3f70b0de32b4f51534175f039ddab15eef8; affected 8f50020ed9b81ba909ce9573f9d05263cdebf502 before e4f2611f07c87b3ddb57c4b9e8efcd1e330fc3dc; affected 8f50020ed9b81ba909ce9573f9d05263cdebf502 before d1af8a39cf839d93c8967fdd858f6bbdc3e4a15c; affected 8f50020ed9b81ba909ce9573f9d05263cdebf502 before 31c07dffafce914c1d1543c135382a11ff058d93 |
| Linux / Linux | affected 3.6; unaffected 0 before 3.6; unaffected 4.19.297 through 4.19.*; unaffected 5.4.259 through 5.4.*; unaffected 5.10.199 through 5.10.*; unaffected 5.15.136 through 5.15.*; unaffected 6.1.59 through 6.1.*; unaffected 6.5.8 through 6.5.*; unaffected 6.6 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/e863f5720a5680e50c4cecf12424d7cc31b3eb0a
- https://git.kernel.org/stable/c/7adcf014bda16cdbf804af5c164d94d5d025db2d
- https://git.kernel.org/stable/c/6ac22ecdaad2ecc662048f8c6b0ceb1ca0699ef9
- https://git.kernel.org/stable/c/d888d3f70b0de32b4f51534175f039ddab15eef8
- https://git.kernel.org/stable/c/e4f2611f07c87b3ddb57c4b9e8efcd1e330fc3dc
- https://git.kernel.org/stable/c/d1af8a39cf839d93c8967fdd858f6bbdc3e4a15c
- https://git.kernel.org/stable/c/31c07dffafce914c1d1543c135382a11ff058d93
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.
- https://git.kernel.org/stable/c/e863f5720a5680e50c4cecf12424d7cc31b3eb0a
- https://git.kernel.org/stable/c/7adcf014bda16cdbf804af5c164d94d5d025db2d
- https://git.kernel.org/stable/c/6ac22ecdaad2ecc662048f8c6b0ceb1ca0699ef9
- https://git.kernel.org/stable/c/d888d3f70b0de32b4f51534175f039ddab15eef8
- https://git.kernel.org/stable/c/e4f2611f07c87b3ddb57c4b9e8efcd1e330fc3dc
- https://git.kernel.org/stable/c/d1af8a39cf839d93c8967fdd858f6bbdc3e4a15c
- https://git.kernel.org/stable/c/31c07dffafce914c1d1543c135382a11ff058d93