Debian/linux: medium 5.5
A missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c in the Linux kernel before 5.8.2 could be used by local attackers to create raw sockets, bypassing security mechanisms, aka CID-
Action: Upgrade linux to 5.7.17-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.7.17-1 | - |
Fixed versions
| 5.7.17-1 |
Sources
published · modified · JSON