Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-3752
HistorySep 17, 2021 - 12:00 a.m.

CVE-2021-3752

2021-09-1700:00:00
ubuntu.com
ubuntu.com
38

7.1 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

7.9 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

45.8%

A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem
in the way user calls connect to the socket and disconnect simultaneously
due to a race condition. This flaw allows a user to crash the system or
escalate their privileges. The highest threat from this vulnerability is to
confidentiality, integrity, as well as system availability.

Bugs

Notes

Author Note
sbeattie this is more difficult to trigger due to the presence of 3af70b39fa2d415dc86c370e5b24ddb9fdacbd6f
OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchlinux< 5.4.0-97.110UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-229.263) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu21.10noarchlinux< 5.13.0-28.31UNKNOWN
ubuntu18.04noarchlinux< 4.15.0-167.175UNKNOWN
ubuntu16.04noarchlinux-azure< 4.15.0-1130.143~16.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu20.04noarchlinux-azure< 5.4.0-1068.71UNKNOWN
ubuntu14.04noarchlinux-azure< 4.15.0-1130.143~14.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu18.04noarchlinux-dell300x< 4.15.0-1034.39UNKNOWN
ubuntu16.04noarchlinux-gcp< 4.15.0-1115.129~16.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu20.04noarchlinux-gcp< 5.4.0-1063.67UNKNOWN
Rows per page:
1-10 of 561

7.1 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

7.9 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

45.8%