cve/2021/CVE-2021-3752.md

CVE-2021-3752

Description

A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously due to a race condition. This flaw allows a user to crash the system or escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

POC

Reference

• https://www.oracle.com/security-alerts/cpujul2022.html

Github

• https://github.com/ARPSyndicate/cvemon