CVE-2021-3609
.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege escalation to root.
- Score
- CVSS 3.1 7.0 High
- Status
- Modified - secalert@redhat.com
- Published
- 2022-03-03
- Last modified
- 2024-08-03
- Weaknesses
- CWE-362
Affected products
- Linux Kernel (Linux)
- H300e Firmware (Netapp)
- H300s Firmware (Netapp)
- H410c Firmware (Netapp)
- H410s Firmware (Netapp)
- H500e Firmware (Netapp)
- H500s Firmware (Netapp)
- H610c Firmware (Netapp)
- H610s Firmware (Netapp)
- H615c Firmware (Netapp)
- H700e Firmware (Netapp)
- H700s Firmware (Netapp)
- 3scale Api Management (Redhat)
- Build Of Quarkus (Redhat)
- Codeready Linux Builder Eus (Redhat)
- Codeready Linux Builder For Power Little Endian Eus (Redhat)
- Enterprise Linux Aus (Redhat)
- Enterprise Linux Eus (Redhat)
- Enterprise Linux For Ibm Z Systems Eus (Redhat)
- Enterprise Linux For Ibm Z Systems Eus S390x (Redhat)
- Enterprise Linux For Power Little Endian Eus (Redhat)
- Enterprise Linux For Real Time (Redhat)
- Enterprise Linux For Real Time For Nfv (Redhat)
- Enterprise Linux For Real Time For Nfv Tus (Redhat)
- Enterprise Linux For Real Time Tus (Redhat)
- Enterprise Linux Server Aus (Redhat)
- Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions (Redhat)
- Enterprise Linux Server Tus (Redhat)
- Enterprise Linux Server Update Services For Sap Solutions (Redhat)
- Openshift Container Platform (Redhat)
- Virtualization (Redhat)
- Virtualization Host (Redhat)
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1971651
- https://github.com/nrb547/kernel-exploitation/blob/main/cve-2021-3609/cve-2021-3609.md
- https://github.com/torvalds/linux/commit/d5f9023fa61ee8b94f37a93f08e94b136cf1e463
- https://security.netapp.com/advisory/ntap-20220419-0004/
- https://www.openwall.com/lists/oss-security/2021/06/19/1