A missing CAP_NET_RAW check in NFC socket creation in net/nfc/rawsock.c in the Linux kernel before 5.8.2 could be used by local attackers to create raw sockets, bypassing security mechanisms, aka CID-26896f01467a. CREATE(Triage):(User=admin) [CVE-2020-26088|https://nvd.nist.gov/vuln/detail/CVE-2020-26088]