net/nfc/llcp_sock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service (NULL pointer dereference and BUG) by making a getsockname call after a certain type of failure of a bind call.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-38208.json"
[
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/4ac06a1e013cf5fdd963317ffd3b968560f33bba",
"digest": {
"line_hashes": [
"259603616213449928778779039490842349876",
"48307413638507243692061511633882722645",
"114147418134524867407941897144484690830",
"8739408948524178385020656337478240553",
"125549859990377560537697546608119782170",
"219999430983554917466386041811745385894",
"82233273071118553413710176114138015858",
"316651457214524025620923539998462120343"
],
"threshold": 0.9
},
"id": "CVE-2021-38208-069332dc",
"deprecated": false,
"target": {
"file": "net/nfc/llcp_sock.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/4ac06a1e013cf5fdd963317ffd3b968560f33bba",
"digest": {
"function_hash": "228615104421124786811553200539123867746",
"length": 1681.0
},
"id": "CVE-2021-38208-90834840",
"deprecated": false,
"target": {
"file": "net/nfc/llcp_sock.c",
"function": "llcp_sock_bind"
}
}
]