GSD-2022-1004020

    Dashboard / Vulnerabilities / GSD-2022-1004020

    GSD-2022-1004020

    Published: 28 Jun 2022Last Modified: 22 Feb 2023

    Summary: NFC: NULL out the dev->rfkill to prevent UAF

    Details: NFC: NULL out the dev->rfkill to prevent UAF This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit f81270125b50532624400063281e6611ecd61ddf, it was introduced in version v4.14.256 by commit 47244ac0b65bd74cc70007d8e1bac68bd2baad19. For more details please see the references link.

    References:

    Affected packages

    Package

    Name: Kernel

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 47244ac0b65bd74cc70007d8e1bac68bd2baad19
    Fixed -None

    Affected versions

    v4.14.256
    v4.14.257
    v4.14.258
    v4.14.259
    v4.14.260
    v4.14.261
    v4.14.262
    v4.14.263
    v4.14.264
    v4.14.265
    v4.14.266
    v4.14.267
    v4.14.268
    v4.14.269
    v4.14.270
    v4.14.271
    v4.14.272
    v4.14.273
    v4.14.274
    v4.14.275
    v4.14.276
    v4.14.277
    v4.14.278
    v4.14.279
    v4.14.280
    v4.14.281
    v4.14.282

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    GSD-2022-1004020 | CVE-DB