CVE-2021-3609
Severity
7.0HIGH
EPSS
0.1%
top 81.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedMar 3
Latest updateJul 13
Description
.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege escalation to root.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.0 | Impact: 5.9
Affected Packages39 packages
Also affects: Enterprise Linux 8.2, 8.1, 8.4, 8.0, Openshift Container Platform 4.6, 4.7, 4.8
Patches
🔴Vulnerability Details
11📋Vendor Advisories
15Microsoft▶
.A flaw was found in the CAN BCM networking protocol in the Linux kernel where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory crash the system or escalate privileges. This ra↗2022-03-08