CVE-2021-33034high
New! CVE Severity Now Using CVSS v3
The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Description
In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-5c4c8c954409. This leads to writing an arbitrary value.
References
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.4
https://syzkaller.appspot.com/bug?id=2e1943a94647f7732dd6fc60368642d6e8dc91b1
https://sites.google.com/view/syzscope/kasan-use-after-free-read-in-hci_send_acl
https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
Details
Source: MITRE
Published: 2021-05-14
Updated: 2021-06-23
Type: CWE-416
Risk Information
CVSS v2
Base Score: 4.6
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Impact Score: 6.4
Exploitability Score: 3.9
Severity: MEDIUM
CVSS v3
Base Score: 7.8
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Impact Score: 5.9
Exploitability Score: 1.8
Severity: HIGH
Vulnerable Software
Configuration 1
OR
Configuration 2
OR
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 153131 | Ubuntu 20.04 LTS : Linux kernel (KVM) vulnerabilities (USN-5000-2) | Nessus | Ubuntu Local Security Checks | high |
| 153127 | Ubuntu 21.04 : Linux kernel (KVM) vulnerabilities (USN-4997-2) | Nessus | Ubuntu Local Security Checks | medium |
| 152313 | EulerOS 2.0 SP9 : kernel (EulerOS-SA-2021-2272) | Nessus | Huawei Local Security Checks | high |
| 152308 | EulerOS 2.0 SP9 : kernel (EulerOS-SA-2021-2246) | Nessus | Huawei Local Security Checks | high |
| 152167 | SUSE SLES15 Security Update : kernel (Live Patch 15 for SLE 15 SP2) (SUSE-SU-2021:2577-1) | Nessus | SuSE Local Security Checks | high |
| 152089 | Scientific Linux Security Update : kernel on SL7.x x86_64 (2021:2725) | Nessus | Scientific Linux Local Security Checks | high |
| 152055 | SUSE SLES12 Security Update : kernel (SUSE-SU-2021:2451-1) | Nessus | SuSE Local Security Checks | high |
| 152003 | RHEL 8 : Red Hat Virtualization Host security and bug fix update [ovirt-4.4.7] (Important) (RHSA-2021:2736) | Nessus | Red Hat Local Security Checks | high |
| 151986 | SUSE SLES15 Security Update : kernel (SUSE-SU-2021:2421-1) | Nessus | SuSE Local Security Checks | high |
| 151979 | CentOS 7 : kernel (CESA-2021:2725) | Nessus | CentOS Local Security Checks | high |
| 151929 | RHEL 7 : RHV-H security update (redhat-virtualization-host) 4.3.17 (Important) (RHSA-2021:2737) | Nessus | Red Hat Local Security Checks | high |
| 151926 | Oracle Linux 7 : kernel (ELSA-2021-2725) | Nessus | Oracle Linux Local Security Checks | high |
| 151920 | Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-5018-1) | Nessus | Ubuntu Local Security Checks | high |
| 151907 | Ubuntu 20.04 LTS / 20.10 : Linux kernel vulnerabilities (USN-5016-1) | Nessus | Ubuntu Local Security Checks | high |
| 151897 | Slackware 14.2 : Slackware 14.2 kernel (SSA:2021-202-01) | Nessus | Slackware Local Security Checks | high |
| 151889 | RHEL 7 : kernel (RHSA-2021:2728) | Nessus | Red Hat Local Security Checks | high |
| 151888 | RHEL 7 : kernel (RHSA-2021:2725) | Nessus | Red Hat Local Security Checks | high |
| 151887 | RHEL 7 : kpatch-patch (RHSA-2021:2729) | Nessus | Red Hat Local Security Checks | high |
| 151886 | RHEL 7 : kernel-rt (RHSA-2021:2726) | Nessus | Red Hat Local Security Checks | high |
| 151878 | SUSE SLES12 Security Update : kernel (SUSE-SU-2021:2406-1) | Nessus | SuSE Local Security Checks | high |
| 151872 | RHEL 8 : kpatch-patch (RHSA-2021:2720) | Nessus | Red Hat Local Security Checks | high |
| 151867 | RHEL 7 : kernel (RHSA-2021:2730) | Nessus | Red Hat Local Security Checks | high |
| 151863 | RHEL 7 : kpatch-patch (RHSA-2021:2727) | Nessus | Red Hat Local Security Checks | high |
| 151859 | RHEL 7 : kernel (RHSA-2021:2734) | Nessus | Red Hat Local Security Checks | high |
| 151858 | RHEL 7 : kernel (RHSA-2021:2732) | Nessus | Red Hat Local Security Checks | high |
| 151857 | RHEL 8 : kernel (RHSA-2021:2718) | Nessus | Red Hat Local Security Checks | high |
| 151856 | RHEL 8 : kernel-rt (RHSA-2021:2719) | Nessus | Red Hat Local Security Checks | high |
| 151843 | RHEL 7 : kpatch-patch (RHSA-2021:2731) | Nessus | Red Hat Local Security Checks | high |
| 151842 | RHEL 7 : kernel (RHSA-2021:2733) | Nessus | Red Hat Local Security Checks | high |
| 151793 | Amazon Linux 2 : kernel (ALAS-2021-1685) | Nessus | Amazon Linux Local Security Checks | medium |
| 151756 | openSUSE 15 Security Update : kernel (openSUSE-SU-2021:1977-1) | Nessus | SuSE Local Security Checks | critical |
| 151730 | openSUSE 15 Security Update : kernel (openSUSE-SU-2021:1975-1) | Nessus | SuSE Local Security Checks | critical |
| 151690 | Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2021-9362) | Nessus | Oracle Linux Local Security Checks | high |
| 151689 | Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2021-9363) | Nessus | Oracle Linux Local Security Checks | high |
| 151570 | EulerOS Virtualization 2.9.0 : kernel (EulerOS-SA-2021-2195) | Nessus | Huawei Local Security Checks | high |
| 151562 | EulerOS Virtualization 2.9.1 : kernel (EulerOS-SA-2021-2183) | Nessus | Huawei Local Security Checks | high |
| 151529 | Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2021-9351) | Nessus | Oracle Linux Local Security Checks | high |
| 151506 | Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2021-9349) | Nessus | Oracle Linux Local Security Checks | high |
| 151464 | OracleVM 3.4 : kernel-uek (OVMSA-2021-0022) | Nessus | OracleVM Local Security Checks | medium |
| 151454 | RHEL 8 : kernel (RHSA-2021:2666) | Nessus | Red Hat Local Security Checks | medium |
| 151453 | RHEL 8 : kpatch-patch (RHSA-2021:2668) | Nessus | Red Hat Local Security Checks | high |
| 151365 | CentOS 8 : kernel (CESA-2021:2570) | Nessus | CentOS Local Security Checks | medium |
| 151281 | Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2021-9346) | Nessus | Oracle Linux Local Security Checks | medium |
| 151280 | openSUSE 15 Security Update : kernel (openSUSE-SU-2021:0947-1) | Nessus | SuSE Local Security Checks | high |
| 151218 | Oracle Linux 8 : kernel (ELSA-2021-2570) | Nessus | Oracle Linux Local Security Checks | medium |
| 151206 | SUSE SLES15 Security Update : kernel (Live Patch 0 for SLE 15 SP3) (SUSE-SU-2021:2198-1) | Nessus | SuSE Local Security Checks | high |
| 151205 | SUSE SLES15 Security Update : kernel (SUSE-SU-2021:2208-1) | Nessus | SuSE Local Security Checks | high |
| 151138 | RHEL 8 : kernel (RHSA-2021:2570) | Nessus | Red Hat Local Security Checks | medium |
| 151137 | RHEL 8 : kernel-rt (RHSA-2021:2599) | Nessus | Red Hat Local Security Checks | medium |
| 151115 | RHEL 8 : kpatch-patch (RHSA-2021:2563) | Nessus | Red Hat Local Security Checks | high |
| 150985 | Debian DLA-2689-1 : linux security update | Nessus | Debian Local Security Checks | high |
| 150984 | Debian DLA-2690-1 : linux-4.19 security update | Nessus | Debian Local Security Checks | high |
| 150957 | Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-5000-1) | Nessus | Ubuntu Local Security Checks | high |
| 150955 | Ubuntu 20.04 LTS : Linux kernel (OEM) vulnerabilities (USN-5001-1) | Nessus | Ubuntu Local Security Checks | medium |
| 150953 | Ubuntu 21.04 : Linux kernel vulnerabilities (USN-4997-1) | Nessus | Ubuntu Local Security Checks | medium |
| 150928 | SUSE SLES12 Security Update : kernel (Live Patch 39 for SLE 12 SP3) (SUSE-SU-2021:2026-1) | Nessus | SuSE Local Security Checks | high |
| 150927 | SUSE SLES15 Security Update : kernel (SUSE-SU-2021:1975-1) | Nessus | SuSE Local Security Checks | critical |
| 150921 | Photon OS 4.0: Linux PHSA-2021-4.0-0047 | Nessus | PhotonOS Local Security Checks | high |
| 150908 | Photon OS 3.0: Linux PHSA-2021-3.0-0254 | Nessus | PhotonOS Local Security Checks | high |
| 150901 | SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2021:1977-1) | Nessus | SuSE Local Security Checks | critical |
| 150900 | SUSE SLES12 / SLES15 Security Update : kernel (Live Patch 11 for SLE 15 SP2) (SUSE-SU-2021:2025-1) | Nessus | SuSE Local Security Checks | high |
| 150886 | SUSE SLES12 Security Update : kernel (Live Patch 38 for SLE 12 SP3) (SUSE-SU-2021:2042-1) | Nessus | SuSE Local Security Checks | high |
| 150883 | SUSE SLES15 Security Update : kernel (Live Patch 13 for SLE 15 SP2) (SUSE-SU-2021:2027-1) | Nessus | SuSE Local Security Checks | high |
| 150882 | SUSE SLES12 / SLES15 Security Update : kernel (Live Patch 18 for SLE 12 SP5) (SUSE-SU-2021:2020-1) | Nessus | SuSE Local Security Checks | high |
| 150881 | SUSE SLES12 / SLES15 Security Update : kernel (Live Patch 23 for SLE 15) (SUSE-SU-2021:2060-1) | Nessus | SuSE Local Security Checks | high |
| 150879 | SUSE SLES12 / SLES15 Security Update : kernel (Live Patch 12 for SLE 15 SP2) (SUSE-SU-2021:2067-1) | Nessus | SuSE Local Security Checks | high |
| 150878 | SUSE SLES15 Security Update : kernel (Live Patch 24 for SLE 15) (SUSE-SU-2021:2057-1) | Nessus | SuSE Local Security Checks | high |
| 150696 | SUSE SLES15 Security Update : kernel (SUSE-SU-2021:1888-1) | Nessus | SuSE Local Security Checks | high |
| 150687 | SUSE SLES12 Security Update : kernel (SUSE-SU-2021:1899-1) | Nessus | SuSE Local Security Checks | high |
| 150472 | SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2021:1913-1) | Nessus | SuSE Local Security Checks | high |
| 150470 | SUSE SLES15 Security Update : kernel (SUSE-SU-2021:1912-1) | Nessus | SuSE Local Security Checks | high |
| 150413 | SUSE SLES12 Security Update : kernel (SUSE-SU-2021:1887-1) | Nessus | SuSE Local Security Checks | high |
| 150407 | SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2021:1890-1) | Nessus | SuSE Local Security Checks | high |
| 150401 | SUSE SLES15 Security Update : kernel (SUSE-SU-2021:1889-1) | Nessus | SuSE Local Security Checks | high |
| 150396 | SUSE SLES12 Security Update : kernel (SUSE-SU-2021:1891-1) | Nessus | SuSE Local Security Checks | high |
| 150315 | openSUSE Security Update : the Linux Kernel (openSUSE-2021-843) | Nessus | SuSE Local Security Checks | high |