Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Linma

Researcher fromBlockSec
#46373of 53,611
5.5Total CVSS
Vulnerabilities · 1
PT-2021-4254
5.5
2021-05-17
Linux · Linux Kernel · CVE-2021-3564
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions 3.13 and later **Description** A double-free memory corruption flaw was found in the Linux kernel's HCI device initialization subsystem. This issue arises when a user attaches a malicious HCI TTY Bluetooth device. A local user could exploit this flaw to crash the system. **Recommendations** For Linux kernel versions 3.13 and later, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting access to the `hci dev do open()` function to minimize the risk of exploitation. Avoid using malicious HCI TTY Bluetooth devices to prevent system crashes.