PT-2021-4204 · Linux+9 · Linux Kernel+9

Published 2021-09-14 · Updated 2023-11-09 · CVE-2021-3752

Positive Technologies (AI Summary)

CVSS v2.0

7.9

High

Base vector

AV:A/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem due to a race condition when user calls connect to the socket and disconnect simultaneously. This flaw allows a user to crash the system or escalate their privileges, posing a threat to confidentiality, integrity, and system availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Use After Free

Weakness Enumeration

CWE-362

CWE-416

Related Identifiers

ALSA-2022:1988

ALT-PU-2021-3330

ALT-PU-2021-3358

ALT-PU-2021-3563

ALT-PU-2021-3573

ALT-PU-2021-3660

ALT-PU-2022-1079

ALT-PU-2022-1240

ALT-PU-2022-1419

ALT-PU-2022-1421

ALT-PU-2023-1814

ALT-PU-2023-4894

BDU:2021-04803

CESA-2022_0620

CESA-2022_1975

CESA-2022_1988

CVE-2021-3752

DLA-2940-1

DLA-2941-1

DSA-5096-1

OESA-2021-1379

OPENSUSE-SU-2021:1357-1

OPENSUSE-SU-2021:1365-1

OPENSUSE-SU-2021:3338-1

OPENSUSE-SU-2021:3387-1

OPENSUSE-SU-2021:3447-1

OPENSUSE-SU-2021:3876-1

OPENSUSE-SU-2021_1357-1

OPENSUSE-SU-2021_1365-1

OPENSUSE-SU-2021_3338-1

OPENSUSE-SU-2021_3387-1

OPENSUSE-SU-2021_3447-1

OPENSUSE-SU-2021_3876-1

RHSA-2022:0620

RHSA-2022:0622

RHSA-2022:1975

RHSA-2022:1988

RHSA-2022_0620

RHSA-2022_0622

RHSA-2022_1975

RHSA-2022_1988

RLSA-2022:1975

RLSA-2022:1988

SUSE-SU-2021:3337-1

SUSE-SU-2021:3338-1

SUSE-SU-2021:3339-1

SUSE-SU-2021:3386-1

SUSE-SU-2021:3387-1

SUSE-SU-2021:3388-1

SUSE-SU-2021:3389-1

SUSE-SU-2021:3415-1

SUSE-SU-2021:3447-1

SUSE-SU-2021:3684-1

SUSE-SU-2021:3710-1

SUSE-SU-2021:3735-1

SUSE-SU-2021:3737-1

SUSE-SU-2021:3738-1

SUSE-SU-2021:3751-1

SUSE-SU-2021:3876-1

SUSE-SU-2021:3929-1

SUSE-SU-2021:3935-1

SUSE-SU-2021:3969-1

SUSE-SU-2021:3972-1

SUSE-SU-2021_3710-1

SUSE-SU-2021_3737-1

USN-5265-1

USN-5267-1

USN-5267-2

USN-5267-3

USN-5268-1

USN-5505-1

USN-5513-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Rocky Linux

Suse

Ubuntu

References · 561

• 🔥 https://openwall.com/lists/oss-security/2021/09/15/4 · Exploit
• https://cve.org/CVERecord?id=CVE-2021-3752 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2021:3876-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5267-2 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:3388-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:3389-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-1679 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-4090 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0330 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2940-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:1975 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-9088.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-5265-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5505-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:3338-1 · Vendor Advisory