CVE-2021-38208: net/nfc/llcp_sock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of...

Security readout for executives and security teams

This Linux kernel flaw can let a local unprivileged user crash or disrupt a vulnerable system through the NFC LLCP socket code. It is not described as remote code execution. Business urgency depends on whether affected kernels with NFC support are present on systems that allow untrusted local users. Exposure is most likely on Linux systems running vulnerable pre-5.12.10 kernels or downstream builds without the fix, where local unprivileged users can access NFC LLCP socket functionality. The bundle does not provide complete distro package ranges, CPEs, or CVSS scoring. Treat this as a targeted availability risk for multi-user or shared Linux environments, not a broad internet-facing emergency based on the supplied evidence. Patch through normal kernel maintenance, with higher priority where untrusted local users exist. Mitigation focus: Update to Linux 5.12.10 or a vendor kernel containing the referenced fix.; Check downstream vendor advisories for backported fixes and package-specific status.; Prioritize shared systems where untrusted users have local shell or process execution access..

Prepared

Jun 2, 2026, 19:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.