A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hci_unregister_dev() together with one of the calls hci_sock_blacklist_add(), hci_sock_blacklist_del(), hci_get_conn_info(), hci_get_auth_info(). A privileged local user could use this flaw to crash the system or escalate their privileges on the system. This flaw affects the Linux kernel versions prior to 5.13-rc5.
CVSS Details
- CVSS 3.1 Base Score: 6.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Aug 13, 2021 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.238-182.421Upgrade kernel-toolsUpgrade perfUpgrade perf-debuginfo | Jul 19, 2021 | Jul 19, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 10, 2021 | Aug 13, 2021 |
| Debian | — | Upgrade linux | Jun 23, 2021 | Jun 23, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools | Sep 16, 2021 | Aug 13, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel | Oct 26, 2021 | Aug 13, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade perf | Sep 7, 2021 | Aug 13, 2021 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 17, 2021 | Jun 8, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Nov 10, 2021 | Aug 13, 2021 |
| Rocky_linux | — | — | May 5, 2022 | Aug 13, 2021 |
| Suse | — | Upgrade ocfs2-kmp-preemptUpgrade kernel-symsUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade gfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-macrosUpgrade kernel-default-develUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-default-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-64kbUpgrade reiserfs-kmp-preemptUpgrade kernel-zfcpdumpUpgrade kernel-preemptUpgrade kselftests-kmp-azureUpgrade kernel-azure-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-default-extraUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade kernel-preempt-livepatch-develUpgrade kernel-default-baseUpgrade kernel-preempt-optionalUpgrade dlm-kmp-azureUpgrade kernel-develUpgrade reiserfs-kmp-azureUpgrade kernel-preempt-develUpgrade ocfs2-kmp-azureUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade gfs2-kmp-preemptUpgrade kernel-debug-develUpgrade dlm-kmp-preemptUpgrade kernel-azure-extraUpgrade cluster-md-kmp-preemptUpgrade dlm-kmp-defaultUpgrade kernel-preempt-extraUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade cluster-md-kmp-64kbUpgrade kernel-docsUpgrade kselftests-kmp-preemptUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade kselftests-kmp-defaultUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kernel-debugUpgrade kernel-64kb-extra | Jul 9, 2021 | Jul 9, 2021 |
| Ubuntu | — | Upgrade linux-image-5.8.0-1040-azureUpgrade linux-image-5.11.0-1013-azureUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.11.0-1016-raspi-nolpaeUpgrade linux-image-5.11.0-31-generic-64kUpgrade linux-image-oracleUpgrade linux-image-5.11.0-27-generic-64kUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.8.0-1042-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-snapdragonUpgrade linux-image-oem-20.04Upgrade linux-image-4.4.0-1102-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-81-genericUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1094-raspi2Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1045-kvmUpgrade linux-image-5.4.0-81-lowlatencyUpgrade linux-image-4.15.0-1110-awsUpgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-5.4.0-81-generic-lpaeUpgrade linux-image-5.11.0-1016-awsUpgrade linux-image-5.4.0-1055-awsUpgrade linux-image-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1053-oracleUpgrade linux-image-4.4.0-222-genericUpgrade linux-image-5.4.0-1051-gcpUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-154-genericUpgrade linux-image-4.15.0-1079-oracleUpgrade linux-image-4.15.0-154-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-gke-5.4Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.11.0-31-lowlatencyUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-5.11.0-27-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1051-gkeUpgrade linux-image-5.4.0-1042-raspiUpgrade linux-image-raspi2Upgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1022-gkeopUpgrade linux-image-5.8.0-1039-gcpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1098-kvmUpgrade linux-image-4.15.0-1107-gcpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-154-generic-lpaeUpgrade linux-image-4.15.0-1122-azureUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1111-snapdragonUpgrade linux-image-5.10.0-1038-oemUpgrade linux-image-raspiUpgrade linux-image-5.11.0-27-genericUpgrade linux-image-5.11.0-1016-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.11.0-27-generic-lpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.11.0-31-genericUpgrade linux-image-5.11.0-31-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-5.11.0-1016-oracleUpgrade linux-image-aws-hweUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.8.0-1038-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-18.04Upgrade linux-image-azureUpgrade linux-image-oem-osp1Upgrade linux-image-5.11.0-1014-kvmUpgrade linux-image-5.11.0-1017-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1056-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oem | Jul 21, 2021 | Jul 9, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 13, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub