Lucene search

K
cvelistRedhatCVELIST:CVE-2021-3609
HistoryMar 03, 2022 - 6:24 p.m.

CVE-2021-3609

2022-03-0318:24:59
CWE-362
redhat
www.cve.org
2
flaw
linux
kernel
can
bcm
networking
protocol
local
attacker
memory
corruption
system
crash
privileges
race condition
escalation

AI Score

7.5

Confidence

High

EPSS

0

Percentile

5.1%

.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege escalation to root.

CNA Affected

[
  {
    "product": "kernel",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Affects kernel v2.6.25 to v5.13-rc6"
      }
    ]
  }
]