CVE-2021-47068 - CVE House
Back to Database
Status published Unknown CVE-2021-47068

net/nfc: fix use-after-free llcp_sock_bind/connect

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: net/nfc: fix use-after-free llcp_sock_bind/connect Commits 8a4cd82d ("nfc: fix refcount leak in llcp_sock_connect()") and c33b1cc62 ("nfc: fix refcount leak in llcp_sock_bind()") fixed a refcount leak bug in bind/connect but introduced a use-after-free if the same local is assigned to 2 different sockets. This can be triggered by the following simple program: int sock1 = socket( AF_NFC, SOCK_STREAM, NFC_SOCKPROTO_LLCP ); int sock2 = socket( AF_NFC, SOCK_STREAM, NFC_SOCKPROTO_LLCP ); memset( &addr, 0, sizeof(struct sockaddr_nfc_llcp) ); addr.sa_family = AF_NFC; addr.nfc_protocol = NFC_PROTO_NFC_DEP; bind( sock1, (struct sockaddr*) &addr, sizeof(struct sockaddr_nfc_llcp) ) bind( sock2, (struct sockaddr*) &addr, sizeof(struct sockaddr_nfc_llcp) ) close(sock1); close(sock2); Fix this by assigning NULL to llcp_sock->local after calling nfc_llcp_local_put. This addresses CVE-2021-23134.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-47068

Credits & Attribution

No credits recorded in the NVD database.

References

More from Linux

View All →
CVE-2025-71315
drm/vkms: Convert to DRM's vblank timer
Unknown 0
CVE-2025-71314
drm/panthor: Recover from panthor_gpu_flush_caches() failures
Unknown 0
CVE-2025-71313
PCI: endpoint: Add missing NULL check for alloc_workqueue()
Unknown 0
CVE-2025-71312
fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super()
Unknown 0
CVE-2025-71311
fs/ntfs3: Initialize new folios before use
Unknown 0

Affected Vendor

Affected Software

Linux
Vulnerable Versions:
a1cdd18c49d23ec38097ac2c5b0d761146fc0109, 18013007b596771bf5f5e7feee9586fb0386ad14, 538a6ff11516d38a61e237d2d2dc04c30c845fbe, adbb1d218c5f56dbae052765da83c0f57fce2a31, c89903c9eff219a4695e63715cf922748d743f65, 6fb003e5ae18d8cda4c8a1175d9dd8db12bec049, 8c9e4971e142e2899606a2490b77a1208c1f4638, c33b1cc62ac05c1dbb1cdafe2eb66da01c76ca8d, 4.4.267, 4.9.267, 4.14.231, 4.19.187, 5.4.112, 5.10.30, 5.11.14, 5.12, 0, 4.4.269, 4.9.269, 4.14.233, 4.19.191, 5.4.119, 5.10.37, 5.11.21, 5.12.4, 5.13

Timeline

Official Publish: February 29th, 2024
Last Modified: May 23rd, 2026
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.