CVE-2020-26088: 
Linux Kernel vulnerability analysis and mitigation

A missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c in the Linux kernel before 5.8.2 could be used by local attackers to create raw sockets, bypassing security mechanisms, aka CID-26896f01467a (NVD, CVE).

The vulnerability exists in the NFC (Near Field Communication) socket implementation which allowed any user to create raw sockets without proper permission checks. The issue was fixed by adding a CAP_NET_RAW capability check before allowing raw socket creation (Github_Commit). The vulnerability has a CVSS v3.1 Base Score of 5.5 (Medium) with vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N (NVD).

On systems with an NFC interface, this vulnerability allowed local users to evade local network security policy by creating raw sockets without proper permissions (Ubuntu_Notice).

The vulnerability can be exploited by local attackers to create raw sockets, bypassing intended security mechanisms. The attack requires local access but is relatively straightforward to exploit given the missing permission check (NVD).

The vulnerability was fixed in Linux kernel version 5.8.2 by adding a CAP_NET_RAW capability check before allowing raw socket creation. Users should upgrade their kernel to version 5.8.2 or later. Various Linux distributions have also backported the fix to their maintained kernel versions (ChangeLog).