cve/2021/CVE-2021-3752.md

18 lines
841 B
Markdown
Raw Normal View History

2024-05-25 21:48:12 +02:00
### [CVE-2021-3752](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3752)
![](https://img.shields.io/static/v1?label=Product&message=kernel&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-416&color=brighgreen)
### Description
A use-after-free flaw was found in the Linux kernels Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously due to a race condition. This flaw allows a user to crash the system or escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
### POC
#### Reference
- https://www.oracle.com/security-alerts/cpujul2022.html
#### Github
- https://github.com/ARPSyndicate/cvemon