PT-2021-4254 · Linux +8 · Linux Kernel +8

🗓️ 17 May 2021 00:00:00Reported by Positive TechnologiesType

Linux kernel 3.13+ has a double-free in HCI init that can crash the system with a malicious HCI Bluetooth device.

Reporter	Title	Published	Views	Family All 10376
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Storage Copy Data Management	29 Jan 202520:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	26 Oct 202218:06	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in the Linux Kernel used in IBM Elastic Storage System	29 Aug 202211:08	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in the Linux Kernel used in IBM Elastic Storage System	11 Dec 202016:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	18 Aug 202514:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	13 Jan 202215:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Linux Kernel affects IBM Integrated Analytics System.	20 Apr 202208:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Packet Capture includes components with multiple known vulnerabilities	4 Feb 202520:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Linux Kernel affect IBM QRadar SIEM (CVE-2021-22543, CVE-2021-3653, CVE-2021-3656, CVE-2021-37576)	28 Apr 202220:56	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in linux (Kernel) affects IBM Integrated Analytics System.	2 Jul 202512:19	–	ibm

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2021_3490_ebpf_alu32_bounds_check_lpe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/chompie1337/Linux_LPE_eBPF_CVE-2021-3490
github	www.github.com/Liang2580/CVE-2021-33909
github	www.github.com/bobfuzzer/CVE/tree/master/CVE-2019-19449
github	www.github.com/PaloAltoNetworks/can-ctr-escape-cve-2022-0492
github	www.github.com/ChrisTheCoolHut/CVE-2021-33909
github	www.github.com/0xdevil/CVE-2021-42008
github	www.github.com/chenaotian/CVE-2022-0492

12 Feb 2023 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.15.5 - 8.8

CVSS 29

CVSS 37.4 - 8.8

CVSS 48.7

EPSS0.67994

SSVC