CVE-2019-17056: Low severity Linux Linux kernel vulnerability
Last updated 12 October 2026
Other sources
llcpsockcreate in net/nfc/llcpsock.c in the AFNFC network module in the Linux kernel through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-3a359798b176.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.9-1Fixed in 7.2.10-1
Event History
Frequently Asked Questions
What is the severity of CVE-2019-17056?
CVE-2019-17056 is considered a high-severity vulnerability due to the potential for unprivileged users to create raw sockets.
How do I fix CVE-2019-17056?
To fix CVE-2019-17056, update your Linux kernel to versions 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.10-1, or 6.12.11-1.
Which systems are affected by CVE-2019-17056?
CVE-2019-17056 affects the Linux kernel up to version 5.3.2.
What impact does CVE-2019-17056 have on system security?
CVE-2019-17056 allows unprivileged users to create raw sockets, potentially leading to unauthorized network access.
Is CVE-2019-17056 present in all Linux distributions?
No, CVE-2019-17056 is specific to certain versions of the Linux kernel and may not be present in all distributions.