Remote No

Type Arbitrary code execution

Description

A use after free vulnerability has been found in sco_conn_del() in the Bluetooth stack of the Linux kernel, similar to CVE-2021-3573. A local attacker with CAP_NET_ADMIN privilege could exploit it to execute arbitrary code.

AVG-1881 linux-hardened 5.12.19.hardened1-1 Medium Vulnerable

AVG-1880 linux-zen 5.13.4.zen1-1 Medium Vulnerable

AVG-1879 linux 5.13.4.arch4-1 Medium Vulnerable

AVG-1741 linux-lts 5.10.52-1 Medium Vulnerable

https://www.openwall.com/lists/oss-security/2021/07/22/1