← Database

CVE-2021-4202

HIGH CVSS: 7.0 Published: 2022-03-25 Modified: 2026-06-17

Description

A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed, leading to a privilege escalation problem.

Affected Platforms

Linux Linux Kernel

Weakness Type

CWE-362, CWE-362, CWE-416

References