CVE-2021-33034

Updated: 2024-11-23 03:04:48.958815

Description:

In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-5c4c8c954409. This leads to writing an arbitrary value.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x MEDIUM 4.6000000000000005
CVSS Version 3.x HIGH 7.8

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

CentOS 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2021-12-09 07:57:19
CentOS 7 ELS kernel 3.10.0 7.8 HIGH Not Vulnerable 2023-11-02 09:35:33
CentOS 8.4 ELS kernel 4.18.0 7.8 HIGH Already Fixed 2023-11-15 10:25:22
CentOS 8.5 ELS kernel 4.18.0 7.8 HIGH Already Fixed 2023-11-15 10:24:34
CloudLinux 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2022-03-30 18:50:51
Oracle Linux 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2022-11-30 10:09:54
Ubuntu 16.04 ELS linux-hwe 4.15.0 7.8 HIGH Already Fixed 2022-10-04 14:02:43
Ubuntu 16.04 ELS linux 4.4.0 7.8 HIGH Released 2021-12-09 07:57:19
Ubuntu 18.04 ELS linux 4.15.0 7.8 HIGH Already Fixed 2023-06-02 09:10:26