Lucene search

[email protected]NVD:CVE-2021-3752

HistoryFeb 16, 2022 - 7:15 p.m.

CVE-2021-3752

2022-02-1619:15:08

CWE-416

CWE-362

[email protected]

web.nvd.nist.gov

linux

bluetooth

use-after-free

vulnerability

race condition

system crash

privilege escalation

confidentiality

integrity

availability

CVSS2

7.9

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.1

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

46.5%

JSON

A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously due to a race condition. This flaw allows a user to crash the system or escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Affected configurations

Nvd

Node

linuxlinux_kernelRange2.6.12–4.4.293

linuxlinux_kernelRange4.5–4.9.291

linuxlinux_kernelRange4.10–4.14.256

linuxlinux_kernelRange4.15–4.19.218

linuxlinux_kernelRange4.20–5.4.160

linuxlinux_kernelRange5.5–5.10.80

linuxlinux_kernelRange5.11–5.14.19

linuxlinux_kernelRange5.15–5.15.3

Node

redhat3scaleMatch2.0

redhatvirtualization_hostMatch4.0

fedoraprojectfedoraMatch34

redhatenterprise_linuxMatch7.0

redhatenterprise_linuxMatch8.0

redhatenterprise_linux_for_real_timeMatch7

redhatenterprise_linux_for_real_time_for_nfvMatch7

Node

netapph300sMatch-

AND

netapph300s_firmwareMatch-

Node

netapph500sMatch-

AND

netapph500s_firmwareMatch-

Node

netapph700sMatch-

AND

netapph700s_firmwareMatch-

Node

netapph300eMatch-

AND

netapph300e_firmwareMatch-

Node

netapph500eMatch-

AND

netapph500e_firmwareMatch-

Node

netapph700eMatch-

AND

netapph700e_firmwareMatch-

Node

netapph410sMatch-

AND

netapph410s_firmwareMatch-

Node

netapph410c_firmwareMatch-

AND

netapph410cMatch-

Node

debiandebian_linuxMatch9.0

debiandebian_linuxMatch10.0

Node

oraclecommunications_cloud_native_core_binding_support_functionMatch22.1.3

oraclecommunications_cloud_native_core_network_exposure_functionMatch22.1.1

oraclecommunications_cloud_native_core_policyMatch22.2.0

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
redhat3scale2.0cpe:2.3:a:redhat:3scale:2.0:*:*:*:*:*:*:*
redhatvirtualization_host4.0cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*
fedoraprojectfedora34cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
redhatenterprise_linux7.0cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
redhatenterprise_linux8.0cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
redhatenterprise_linux_for_real_time7cpe:2.3:o:redhat:enterprise_linux_for_real_time:7:*:*:*:*:*:*:*
redhatenterprise_linux_for_real_time_for_nfv7cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:7:*:*:*:*:*:*:*
netapph300s-cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*
netapph300s_firmware-cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
redhat	3scale	2.0	cpe:2.3:a:redhat:3scale:2.0:::::::*
redhat	virtualization_host	4.0	cpe:2.3:a:redhat:virtualization_host:4.0:::::::*
fedoraproject	fedora	34	cpe:2.3:o:fedoraproject:fedora:34:::::::*
redhat	enterprise_linux	7.0	cpe:2.3:o:redhat:enterprise_linux:7.0:::::::*
redhat	enterprise_linux	8.0	cpe:2.3:o:redhat:enterprise_linux:8.0:::::::*
redhat	enterprise_linux_for_real_time	7	cpe:2.3:o:redhat:enterprise_linux_for_real_time:7:::::::*
redhat	enterprise_linux_for_real_time_for_nfv	7	cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:7:::::::*
netapp	h300s	-	cpe:2.3:h:netapp:h300s:-:::::::*
netapp	h300s_firmware	-	cpe:2.3:o:netapp:h300s_firmware:-:::::::*