CVE-2021-3609
Summary
| CVE | CVE-2021-3609 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2022-03-03 19:15:00 UTC |
|---|
| Updated | 2023-08-11 19:44:00 UTC |
|---|
| Description | .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege escalation to root. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| can: bcm: delay release of struct bcm_op after synchronize_rcu() · torvalds/linux@d5f9023 · GitHub |
MISC |
github.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| oss-security - CVE-2021-3609: Race condition in net/can/bcm.c leads to local
privilege escalation |
MISC |
www.openwall.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| CVE-2021-3609 Linux Kernel Vulnerability in NetApp Products | NetApp Product Security |
CONFIRM |
security.netapp.com |
|
| kernel-exploitation/cve-2021-3609.md at main · nrb547/kernel-exploitation · GitHub |
MISC |
github.com |
|
| 1971651 – (CVE-2021-3609) CVE-2021-3609 kernel: race condition in net/can/bcm.c leads to local privilege escalation |
MISC |
bugzilla.redhat.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159329 Oracle Enterprise Linux Security Update for kernel (ELSA-2021-3057)
- 159380 Oracle Enterprise Linux Security Update for Unbreakable Enterprise kernel (ELSA-2021-9442)
- 159393 Oracle Enterprise Linux Security Update for Unbreakable Enterprise kernel (ELSA-2021-9450)
- 159394 Oracle Enterprise Linux Security Update for Unbreakable Enterprise kernel-container (ELSA-2021-9451)
- 159399 Oracle Enterprise Linux Security Update for Unbreakable Enterprise kernel (ELSA-2021-9452)
- 159400 Oracle Enterprise Linux Security Update for Unbreakable Enterprise kernel-container (ELSA-2021-9453)
- 178710 Debian Security Update for linux (DSA 4941-1)
- 178712 Debian Security Update for linux (DLA 2713-1)
- 178713 Debian Security Update for linux-4.19 (DLA 2714-1)
- 178714 Debian Security Update for linux (DLA 2713-2)
- 180451 Debian Security Update for linux (CVE-2021-3609)
- 198416 Ubuntu Security Notification for Linux kernel vulnerabilities (USN-4997-1)
- 198417 Ubuntu Security Notification for Linux kernel vulnerabilities (USN-4999-1)
- 198418 Ubuntu Security Notification for Linux kernel vulnerabilities (USN-5000-1)
- 198419 Ubuntu Security Notification for Linux kernel (OEM) vulnerabilities (USN-5001-1)
- 198420 Ubuntu Security Notification for Linux kernel (HWE) vulnerability (USN-5002-1)
- 198421 Ubuntu Security Notification for Linux kernel vulnerabilities (USN-5003-1)
- 198425 Ubuntu Security Notification for Linux kernel (KVM) vulnerabilities (USN-5000-2)
- 198426 Ubuntu Security Notification for Linux kernel (KVM) vulnerabilities (USN-4997-2)
- 198504 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-5082-1)
- 239541 Red Hat Update for kernel (RHSA-2021:3057)
- 239542 Red Hat Update for kpatch-patch (RHSA-2021:3044)
- 239543 Red Hat Update for kernel-rt (RHSA-2021:3088)
- 239593 Red Hat Update for kpatch-patch (RHSA-2021:3380)
- 239594 Red Hat Update for kernel-rt (RHSA-2021:3375)
- 239599 Red Hat Update for kernel (RHSA-2021:3363)
- 239614 Red Hat Update for kernel (RHSA-2021:3444)
- 239616 Red Hat Update for kpatch-patch (RHSA-2021:3442)
- 281692 Fedora Security Update for kernel (FEDORA-2021-fe826f202e)
- 281693 Fedora Security Update for kernel (FEDORA-2021-95f2f1cfc7)
- 352871 Amazon Linux Security Advisory for kernel : ALAS-2021-1539
- 353097 Amazon Linux Security Advisory for kernel : ALAC2012-2021-033
- 353098 Amazon Linux Security Advisory for kmod-sfc : ALAC2012-2021-034
- 353099 Amazon Linux Security Advisory for kmod-mlx5 : ALAC2012-2021-035
- 390219 Oracle Managed Virtualization (VM) Server for x86 Security Update for kernel (OVMSA-2021-0030)
- 610430 Google Android September 2022 Security Patch Missing for Huawei EMUI
- 610432 Google Pixel Android August 2022 Security Patch Missing
- 670634 EulerOS Security Update for kernel (EulerOS-SA-2021-2392)
- 670707 EulerOS Security Update for kernel (EulerOS-SA-2021-2465)
- 670744 EulerOS Security Update for kernel (EulerOS-SA-2021-2502)
- 670772 EulerOS Security Update for kernel (EulerOS-SA-2021-2530)
- 671047 EulerOS Security Update for kernel (EulerOS-SA-2021-2588)
- 750844 SUSE Enterprise Linux Security Update for kernel (SUSE-SU-2021:2407-1)
- 750848 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:2416-1)(Sequoia)
- 750864 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:2421-1)
- 750868 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:2427-1)
- 750869 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:2422-1)
- 750877 OpenSUSE Security Update for the Linux Kernel (openSUSE-SU-2021:2427-1)
- 750880 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2021:2451-1)
- 750887 OpenSUSE Security Update for the Linux Kernel (openSUSE-SU-2021:1076-1)
- 750953 OpenSUSE Security Update for the Linux Kernel (openSUSE-SU-2021:2645-1)
- 750963 OpenSUSE Security Update for the Linux Kernel (openSUSE-SU-2021:2687-1)
- 751037 SUSE Enterprise Linux Security Update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) (SUSE-SU-2021:2842-1)
- 900732 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (8877)
- 906192 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (8877-1)
- 940353 AlmaLinux Security Update for kernel (ALSA-2021:3057)
- 960074 Rocky Linux Security Update for kernel (RLSA-2021:3057)
- 960852 Rocky Linux Security Update for kernel-rt (RLSA-2021:3088)
