Related Vulnerabilities: CVE-2021-3573  

A use after free vulnerability has been found in the hci_sock_bound_ioctl() function of the Linux kernel. It can allow attackers to corrupt kernel heaps (kmalloc-8k to be specific) and adopt further exploitations.

Severity Medium

Remote No

Type Arbitrary code execution

Description

A use after free vulnerability has been found in the hci_sock_bound_ioctl() function of the Linux kernel. It can allow attackers to corrupt kernel heaps (kmalloc-8k to be specific) and adopt further exploitations.

AVG-1881 linux-hardened 5.12.9.hardened1-1 Medium Vulnerable

AVG-1880 linux-zen 5.12.9.zen1-1 Medium Vulnerable

AVG-1879 linux 5.12.9.arch4-1 Medium Vulnerable

AVG-1741 linux-lts 5.10.42-1 Medium Vulnerable

https://www.openwall.com/lists/oss-security/2021/06/08/2
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e305509e678b3a4af2b3cfd410f409f7cdaabb52