CVE-2021-3752
Severity
7.1HIGH
EPSS
0.0%
top 86.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 16
Latest updateJul 13
Description
A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously due to a race condition. This flaw allows a user to crash the system or escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
CVSS vector
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9
Affected Packages8 packages
Also affects: Debian Linux 10.0, 9.0, Enterprise Linux 7.0, 8.0, 7, Fedora 34
Patches
🔴Vulnerability Details
7GHSA▶
GHSA-3f53-58pp-pg79: A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously du↗2022-02-17
CVEList▶
CVE-2021-3752: A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously du↗2022-02-16
📋Vendor Advisories
9Microsoft▶
A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously due to a race condition. This flaw allows a user to ↗2022-02-08