CVE-2021-3587
Publication date 31 May 2021
Last updated 24 July 2024
Ubuntu priority
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-38208. Reason: This candidate is a reservation duplicate of CVE-2021-38208. Notes: All CVE users should reference CVE-2021-38208 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
From the Ubuntu Security Team
It was discovered that the NFC implementation in the Linux kernel did not properly handle failed connect events leading to a NULL pointer dereference. A local attacker could use this to cause a denial of service.
Get expanded security coverage with Ubuntu Pro
Reduce your average CVE exposure time from 98 days to 1 day with expanded CVE patching, ten-years security maintenance and optional support for the full stack of open-source applications. Free for personal use.
Get Ubuntu ProReferences
Related Ubuntu Security Notices (USN)
- USN-5015-1
- Linux kernel (OEM) vulnerabilities
- 20 July 2021
- USN-5044-1
- Linux kernel vulnerabilities
- 24 August 2021
- USN-5045-1
- Linux kernel vulnerabilities
- 18 August 2021
- USN-5046-1
- Linux kernel vulnerabilities
- 18 August 2021
Other references
- https://www.openwall.com/lists/oss-security/2021/06/01/1
- https://www.openwall.com/lists/oss-security/2021/06/06/2
- https://www.openwall.com/lists/oss-security/2021/06/08/1
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4ac06a1e013cf5fdd963317ffd3b968560f33bba
- https://www.cve.org/CVERecord?id=CVE-2021-3587