CVE-2021-4202: Linux Kernel

High severity, CVSS 7.0. EPSS: 0.4% chance of exploitation in the next 30 days.

A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed, leading to a privilege escalation problem.

Affected products

• Linux Linux Kernel: from 3.2, before 4.4.294 (fixed in 4.4.294); from 4.5, before 4.9.292 (fixed in 4.9.292); from 4.10, before 4.14.257 (fixed in 4.14.257); from 4.15, before 4.19.219 (fixed in 4.19.219); from 4.20, before 5.4.163 (fixed in 5.4.163); from 5.5.0, before 5.10.82 (fixed in 5.10.82); …

Published 2022-03-25. Last modified 2026-06-17.