A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hci_unregister_dev() together with one of the calls hci_sock_blacklist_add(), hci_sock_blacklist_del(), hci_get_conn_info(), hci_get_auth_info(). A privileged local user could use this flaw to crash the system or escalate their privileges on the system. This flaw affects the Linux kernel versions prior to 5.13-rc5.
CVSS Details
- CVSS 3.1 Base Score: 6.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Aug 13, 2021 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernel-livepatch-4.14.238-182.421Upgrade perfUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headers | Jul 19, 2021 | Jul 19, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 10, 2021 | Aug 13, 2021 |
| Debian | — | Upgrade linux | Jun 23, 2021 | Jun 23, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debug-develUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debug | Sep 16, 2021 | Aug 13, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-tools | Oct 26, 2021 | Aug 13, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headers | Sep 7, 2021 | Aug 13, 2021 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 17, 2021 | Jun 8, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Nov 10, 2021 | Aug 13, 2021 |
| Rocky_linux | — | — | May 5, 2022 | Aug 13, 2021 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade kernel-docs-htmlUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-preemptUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-symsUpgrade kernel-default-base-rebuildUpgrade kernel-obs-qaUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade reiserfs-kmp-preemptUpgrade kernel-default-optionalUpgrade kernel-preemptUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-azure-develUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-develUpgrade kernel-preempt-develUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-preempt-extraUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade reiserfs-kmp-azureUpgrade kernel-azureUpgrade kernel-preempt-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-debugUpgrade dlm-kmp-preemptUpgrade dlm-kmp-azureUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade kselftests-kmp-defaultUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade gfs2-kmp-preemptUpgrade kernel-obs-buildUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade cluster-md-kmp-preemptUpgrade kernel-preempt-optionalUpgrade kernel-64kb-develUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-preemptUpgrade cluster-md-kmp-64kb | Jul 9, 2021 | Jul 9, 2021 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1051-gcpUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-5.11.0-1016-awsUpgrade linux-image-5.4.0-1053-oracleUpgrade linux-image-5.4.0-1045-kvmUpgrade linux-image-4.15.0-1079-oracleUpgrade linux-image-kvmUpgrade linux-image-5.8.0-1040-azureUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-222-genericUpgrade linux-image-5.11.0-1016-raspi-nolpaeUpgrade linux-image-5.4.0-81-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-snapdragonUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-154-genericUpgrade linux-image-4.15.0-1094-raspi2Upgrade linux-image-oem-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-5.8.0-1042-awsUpgrade linux-image-5.4.0-81-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1102-awsUpgrade linux-image-5.4.0-81-genericUpgrade linux-image-4.15.0-154-lowlatencyUpgrade linux-image-4.15.0-1110-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1055-awsUpgrade linux-image-5.11.0-31-generic-64kUpgrade linux-image-5.11.0-1013-azureUpgrade linux-image-5.11.0-27-generic-64kUpgrade linux-image-5.11.0-27-lowlatencyUpgrade linux-image-5.8.0-1038-oracleUpgrade linux-image-azureUpgrade linux-image-5.10.0-1038-oemUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.11.0-1016-oracleUpgrade linux-image-5.11.0-1016-raspiUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-5.11.0-31-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-154-generic-lpaeUpgrade linux-image-5.8.0-1039-gcpUpgrade linux-image-4.15.0-1122-azureUpgrade linux-image-4.15.0-1111-snapdragonUpgrade linux-image-gkeop-5.4Upgrade linux-image-aws-hweUpgrade linux-image-5.11.0-31-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.11.0-1014-kvmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-5.11.0-27-generic-lpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.11.0-31-generic-lpaeUpgrade linux-image-5.4.0-1051-gkeUpgrade linux-image-5.4.0-1042-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-4.15.0-1098-kvmUpgrade linux-image-raspi2Upgrade linux-image-5.11.0-27-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.4.0-1138-awsUpgrade linux-image-5.4.0-1022-gkeopUpgrade linux-image-5.11.0-1017-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1107-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-generic-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-oemUpgrade linux-image-5.4.0-1056-azureUpgrade linux-image-generic | Jul 21, 2021 | Jul 9, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 13, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub