CVE-2021-3752
- State
- Published
- Severity
- Not scored
- Published
- Feb 16, 2022
- Updated
- Aug 3, 2024
- Reserved
- Aug 31, 2021
Description
A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously due to a race condition. This flaw allows a user to crash the system or escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Scores
The record has no CVSS score.
Weaknesses
Affected Products
| Product | Versions |
|---|---|
kerneln/a |
|
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1999544
- https://lore.kernel.org/lkml/20211115165435.133245729%40linuxfoundation.org/
- https://www.openwall.com/lists/oss-security/2021/09/15/4
- [debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security updatemailing-list
- [debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security updatemailing-list
- DSA-5096vendor-advisory
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://security.netapp.com/advisory/ntap-20220318-0009/
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.