Linux · Linux Kernel · CVE-2021-3564
**Name of the Vulnerable Software and Affected Versions**
Linux kernel versions 3.13 and later
**Description**
A double-free memory corruption flaw was found in the Linux kernel's HCI device initialization subsystem. This issue arises when a user attaches a malicious HCI TTY Bluetooth device. A local user could exploit this flaw to crash the system.
**Recommendations**
For Linux kernel versions 3.13 and later, update to a version that includes a fix for this issue.
As a temporary workaround, consider restricting access to the `hci dev do open()` function to minimize the risk of exploitation.
Avoid using malicious HCI TTY Bluetooth devices to prevent system crashes.