CVE-2021-3564
- State
- Published
- Severity
- Not scored
- Published
- Jun 8, 2021
- Updated
- Aug 3, 2024
- Reserved
- May 24, 2021
Description
A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluetooth device. A local user could use this flaw to crash the system. This flaw affects all the Linux kernel versions starting from 3.13.
Scores
The record has no CVSS score.
Weaknesses
Affected Products
| Product | Versions |
|---|---|
kerneln/a |
|
References
- [oss-security] 20210525 CVE-2021-3564 Linux Bluetooth device initialization implementation bugmailing-list
- [oss-security] 20210601 Re: CVE-2021-3564 Linux Bluetooth device initialization implementation bugmailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=1964139
- https://www.openwall.com/lists/oss-security/2021/05/25/1
- [debian-lts-announce] 20210623 [SECURITY] [DLA 2689-1] linux security updatemailing-list
- [debian-lts-announce] 20210623 [SECURITY] [DLA 2690-1] linux-4.19 security updatemailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.