CVE-2021-23134: Debian Linux

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP_NET_RAW capability.

Affected products

• Debian Debian Linux: version 9.0 only
• Fedoraproject Fedora: version 33 only; version 34 only
• Linux Linux Kernel: before 4.4.269 (fixed in 4.4.269); from 4.5, before 4.9.269 (fixed in 4.9.269); from 4.10, before 4.14.233 (fixed in 4.14.233); from 4.15, before 4.19.191 (fixed in 4.19.191); from 4.20, before 5.4.119 (fixed in 5.4.119); from 5.5, before 5.10.37 (fixed in 5.10.37); …
• Netapp Cloud Backup: affected versions not specified
• Netapp h300s Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified
• Netapp Solidfire Baseboard Management Controller Firmware: affected versions not specified

Published 2021-05-12. Last modified 2026-07-30.