vulnerability

Oracle Linux: CVE-2021-3752: ELSA-2022-0620: kernel security and bug fix update (IMPORTANT) (Multiple Advisories)

Severity
8
CVSS
(AV:A/AC:M/Au:N/C:C/I:C/A:C)
Published
Sep 14, 2021
Added
Feb 2, 2022
Modified
Dec 3, 2025

Description

A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously due to a race condition. This flaw allows a user to crash the system or escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Solutions

oracle-linux-upgrade-kerneloracle-linux-upgrade-kernel-uek
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.