CVE-2021-33034

Опубликовано: 14 мая 2021

Источник: nvd

CVSS3: 7.8

CVSS2: 4.6

EPSS Низкий

Описание

In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-5c4c8c954409. This leads to writing an arbitrary value.

Ссылки

https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.4
Mailing List
Patch
Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5c4c8c9544099bb9043a10a5318130a943e32fc3
Mailing List
Patch
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GI7Z7UBWBGD3ABNIL2DC7RQDCGA4UVQW/
https://sites.google.com/view/syzscope/kasan-use-after-free-read-in-hci_send_acl
Exploit
Third Party Advisory
https://syzkaller.appspot.com/bug?id=2e1943a94647f7732dd6fc60368642d6e8dc91b1
Exploit
Mailing List
Third Party Advisory
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.4
Mailing List
Patch
Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5c4c8c9544099bb9043a10a5318130a943e32fc3
Mailing List
Patch
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GI7Z7UBWBGD3ABNIL2DC7RQDCGA4UVQW/
https://sites.google.com/view/syzscope/kasan-use-after-free-read-in-hci_send_acl
Exploit
Third Party Advisory
https://syzkaller.appspot.com/bug?id=2e1943a94647f7732dd6fc60368642d6e8dc91b1
Exploit
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 5.12.4 (исключая)

Конфигурация 2

cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 31%

0.00114

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-416

Связанные уязвимости

CVE-2021-33034

CVSS3: 7.8

ubuntu

около 4 лет назад

In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-5c4c8c954409. This leads to writing an arbitrary value.

CVE-2021-33034

CVSS3: 7.8

redhat

около 4 лет назад

In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-5c4c8c954409. This leads to writing an arbitrary value.

CVE-2021-33034

CVSS3: 7.8

msrc

около 4 лет назад

Описание отсутствует

CVE-2021-33034

CVSS3: 7.8

debian

около 4 лет назад

In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use ...

GHSA-3qpw-8jg3-xjrh

CVSS3: 7.8

github

около 3 лет назад

In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-5c4c8c954409. This leads to writing an arbitrary value.

EPSS

Процентиль: 31%

0.00114

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-416