---
cve: "CVE-2021-23134"
severity: "HIGH"
cvss: 7.8
epss: "37%"
vendor: "Linux kernel"
kev: false
exploited: false
published: "2021-05-12 23:15:07"
tags: [cve, security, high]
source: tsecurity.de CVE-Dossier
exported: "2026-09-10T11:49:03+02:00"
---

# CVE-2021-23134

> 7.8 HIGH

## Beschreibung

Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP_NET_RAW capability.

## CVSS-Vektor

```
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Lokal | good |
| AC Komplexität | Gering | bad |
| PR Privilegien | Gering | warn |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Referenzen

- <https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=c61760e6940d>
- <https://www.openwall.com/lists/oss-security/2021/05/11/4>
- <https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZYORWNQIHNWRFYRDXBWYWBYM46PDZEN/>
- <https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QALNQT4LJFVSSA3MWCIECVY4AFPP4X77/>
- <https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html>
- <https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html>
- <https://security.netapp.com/advisory/ntap-20210625-0007/>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2021-23134) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_