A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hci_unregister_dev() together with one of the calls hci_sock_blacklist_add(), hci_sock_blacklist_del(), hci_get_conn_info(), hci_get_auth_info(). A privileged local user could use this flaw to crash the system or escalate their privileges on the system. This flaw affects the Linux kernel versions prior to 5.13-rc5.
CVSS Details
- CVSS 3.1 Base Score: 6.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Aug 13, 2021 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade perfUpgrade kernel-livepatch-4.14.238-182.421Upgrade perf-debuginfoUpgrade bpftoolUpgrade kernelUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfo | Jul 19, 2021 | Jul 19, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 10, 2021 | Aug 13, 2021 |
| Debian | — | Upgrade linux | Jun 23, 2021 | Jun 23, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernel-debug-develUpgrade kernel-debugUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libs | Sep 16, 2021 | Aug 13, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | Oct 26, 2021 | Aug 13, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libs | Sep 7, 2021 | Aug 13, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Sep 17, 2021 | Jun 8, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 10, 2021 | Aug 13, 2021 |
| Rocky_linux | — | — | May 5, 2022 | Aug 13, 2021 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-debug-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-preemptUpgrade ocfs2-kmp-preemptUpgrade kernel-azure-optionalUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade reiserfs-kmp-preemptUpgrade ocfs2-kmp-64kbUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-symsUpgrade kernel-default-base-rebuildUpgrade kernel-default-baseUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade dlm-kmp-preemptUpgrade kernel-64kb-extraUpgrade kselftests-kmp-preemptUpgrade dlm-kmp-azureUpgrade kernel-preempt-develUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kernel-preempt-livepatch-develUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade kernel-preempt-extraUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-preemptUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade kernel-preempt-optionalUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade gfs2-kmp-preemptUpgrade gfs2-kmp-default | Jul 9, 2021 | Jul 9, 2021 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1122-azureUpgrade linux-image-5.11.0-27-lowlatencyUpgrade linux-image-5.8.0-1039-gcpUpgrade linux-image-4.15.0-1111-snapdragonUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.10.0-1038-oemUpgrade linux-image-gkeopUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.11.0-1014-kvmUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.11.0-1017-gcpUpgrade linux-image-5.4.0-1051-gkeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-1098-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-genericUpgrade linux-image-5.11.0-31-genericUpgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-5.11.0-31-generic-lpaeUpgrade linux-image-5.4.0-1022-gkeopUpgrade linux-image-aws-hweUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.11.0-27-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-154-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1042-raspiUpgrade linux-image-5.11.0-1016-raspiUpgrade linux-image-5.8.0-1038-oracleUpgrade linux-image-azureUpgrade linux-image-5.11.0-31-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.11.0-27-generic-lpaeUpgrade linux-image-5.11.0-1016-oracleUpgrade linux-image-5.4.0-1056-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-1107-gcpUpgrade linux-image-oemUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-5.11.0-1013-azureUpgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-154-lowlatencyUpgrade linux-image-5.4.0-1055-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.11.0-1016-raspi-nolpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1051-gcpUpgrade linux-image-5.4.0-81-lowlatencyUpgrade linux-image-5.11.0-27-generic-64kUpgrade linux-image-4.15.0-1079-oracleUpgrade linux-image-gke-5.4Upgrade linux-image-5.11.0-31-generic-64kUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-kvmUpgrade linux-image-4.15.0-154-genericUpgrade linux-image-4.4.0-222-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.8.0-1040-azureUpgrade linux-image-4.4.0-1102-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-5.4.0-81-generic-lpaeUpgrade linux-image-5.8.0-1042-awsUpgrade linux-image-4.15.0-1094-raspi2Upgrade linux-image-5.4.0-81-genericUpgrade linux-image-5.4.0-1053-oracleUpgrade linux-image-awsUpgrade linux-image-5.4.0-1045-kvmUpgrade linux-image-5.11.0-1016-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1110-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gcp-lts-18.04 | Jul 21, 2021 | Jul 9, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 13, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub