kernel: race condition for removal of the HCI controller

🗓️ 09 Sep 2021 09:25:32Reported by RedHatType

Race condition in removing Bluetooth host controller interface enables a local attacker to corrupt memory and gain privileges.

Reporter	Title	Published	Views	Family All 470
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	3 Dec 202118:47	–	ibm
IBM Security Bulletins	Security Bulletin: Publicly disclosed vulnerabilities from Kernel affect IBM Netezza Host Management	24 Dec 202113:23	–	ibm
ATTACKERKB	CVE-2021-32399	10 May 202122:15	–	attackerkb
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2-2021-1685 (ALAS-2021-1685)	16 Jul 202100:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-002 (ALASKERNEL-5.10-2022-002)	2 May 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2022-004 (ALASKERNEL-5.4-2022-004)	2 May 202200:00	–	nessus
Tenable Nessus	AlmaLinux 8 : kernel (ALSA-2021:2714)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : kernel (CESA-2021:2714)	21 Jul 202100:00	–	nessus
Tenable Nessus	CentOS 7 : kernel (RHSA-2021:3327)	2 Sep 202100:00	–	nessus
Tenable Nessus	CentOS 7 : kpatch-patch (RHSA-2021:3381)	9 Oct 202400:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	7.9	noarch	redhat-virtualization-host-image-update	4.3.18-20210903.0.el7_9	redhat-virtualization-host-image-update-4.3.18-20210903.0.el7_9.noarch.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2021-32399
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-32399
cve	www.cve.org/CVERecord

11 Jul 2026 17:41Current

6.7Medium risk

Vulners AI Score6.7

CVSS 24.4

CVSS 3.17

EPSS0.00691