NetSight
IP …
high7.0

CVE-2021-3640

A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way trigge…

Impact

A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sendmsg() with the expected controllable faulting memory page. A privileged local user could use this flaw to crash the system or escalate their privileges on the system.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.4.293
from 4.5 before 4.9.291
from 4.10 before 4.14.256
from 4.15 before 4.19.218
from 4.20 before 5.4.160
from 5.5.0 before 5.10.80
DebianDebian Linux
Version 9.0
FedoraprojectFedora
Version 34
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 20.04, 21.10
NetappH300s Firmware
All versions
NetappH700s Firmware
All versions
NetappH300e Firmware
All versions
NetappH500e Firmware
All versions
NetappH700e Firmware
All versions
NetappH410s Firmware
All versions
NetappH410c Firmware
All versions
NetappH500s Firmware
All versions

Weakness classification

CWE-362CWE-416

References