Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-3752
HistorySep 17, 2021 - 12:00 a.m.

CVE-2021-3752

2021-09-1700:00:00
ubuntu.com
ubuntu.com
49

7.9 High

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:C/A:C

7.1 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

46.7%

A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem
in the way user calls connect to the socket and disconnect simultaneously
due to a race condition. This flaw allows a user to crash the system or
escalate their privileges. The highest threat from this vulnerability is to
confidentiality, integrity, as well as system availability.

Bugs

Notes

Author Note
sbeattie this is more difficult to trigger due to the presence of 3af70b39fa2d415dc86c370e5b24ddb9fdacbd6f
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-167.175UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-97.110UNKNOWN
ubuntu21.10noarchlinux< 5.13.0-28.31UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-229.263UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1119.127UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1064.67UNKNOWN
ubuntu14.04noarchlinux-aws< 4.4.0-1109.115UNKNOWN
ubuntu16.04noarchlinux-aws< 4.4.0-1145.160UNKNOWN
ubuntu20.04noarchlinux-aws-5.13< 5.13.0-1012.13~20.04.1UNKNOWN
ubuntu18.04noarchlinux-aws-5.4< 5.4.0-1064.67~18.04.1UNKNOWN
Rows per page:
1-10 of 581

7.9 High

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:C/A:C

7.1 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

46.7%