Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd416baaa9-dc9f-4396-8d5f-8c081fb06d67NVD:CVE-2021-47612
HistoryJun 19, 2024 - 3:15 p.m.

CVE-2021-47612

2024-06-1915:15:55
CWE-476
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
5
linux kernel
nfc vulnerability
segfault
nfc_genl_dump_devices_done
kasan
null-ptr-deref
netlink_sock_destruct_work

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

5.0%

JSON

In the Linux kernel, the following vulnerability has been resolved:

nfc: fix segfault in nfc_genl_dump_devices_done

When kmalloc in nfc_genl_dump_devices() fails then
nfc_genl_dump_devices_done() segfaults as below

KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
CPU: 0 PID: 25 Comm: kworker/0:1 Not tainted 5.16.0-rc4-01180-g2a987e65025e-dirty #5
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-6.fc35 04/01/2014
Workqueue: events netlink_sock_destruct_work
RIP: 0010:klist_iter_exit+0x26/0x80
Call Trace:
<TASK>
class_dev_iter_exit+0x15/0x20
nfc_genl_dump_devices_done+0x3b/0x50
genl_lock_done+0x84/0xd0
netlink_sock_destruct+0x8f/0x270
__sk_destruct+0x64/0x3b0
sk_destruct+0xa8/0xd0
__sk_free+0x2e8/0x3d0
sk_free+0x51/0x90
netlink_sock_destruct_work+0x1c/0x20
process_one_work+0x411/0x710
worker_thread+0x6fd/0xa80

Affected configurations

Nvd
Node
linuxlinux_kernelRange<4.4.296
OR
linuxlinux_kernelRange4.5–4.9.294
OR
linuxlinux_kernelRange4.10–4.14.259
OR
linuxlinux_kernelRange4.15–4.19.222
OR
linuxlinux_kernelRange4.20–5.4.167
OR
linuxlinux_kernelRange5.5–5.10.87
OR
linuxlinux_kernelRange5.11–5.15.10
VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Related

cvelist 1
debiancve 1
osv 1
cve 1
redhatcve 1
ubuntucve 1
vulnrichment 1
nessus 5
openvas 3
cvelist
cvelist
CVE-2021-47612 nfc: fix segfault in nfc_genl_dump_devices_done
2024-06-19 14:58:01
debiancve
debiancve
CVE-2021-47612
2024-06-19 15:15:55
osv
osv
CVE-2021-47612
2024-06-19 15:15:00
cve
cve
CVE-2021-47612
2024-06-19 15:15:55
redhatcve
redhatcve
CVE-2021-47612
2024-06-20 11:57:13
ubuntucve
ubuntucve
CVE-2021-47612
2024-06-19 00:00:00
vulnrichment
vulnrichment
CVE-2021-47612 nfc: fix segfault in nfc_genl_dump_devices_done
2024-06-19 14:58:01
nessus
nessus
SUSE SLES15 Security Update : kernel (SUSE-SU-2024:2362-1)
2024-07-10 00:00:00
SUSE SLES15 Security Update : kernel (SUSE-SU-2024:2929-1)
2024-08-16 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:2372-1)
2024-07-10 00:00:00
openvas
openvas
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2024:2362-1)
2024-07-12 00:00:00
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2024:2394-1)
2024-07-12 00:00:00
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2024:2372-1)
2024-07-12 00:00:00

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

5.0%

JSON
Related for NVD:CVE-2021-47612
cvelist1debiancve1osv1cve1redhatcve1ubuntucve1vulnrichment1nessus5openvas3