CVE-2021-3609

Fixed in a distro release EPSS <1%

.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege escalation to root.

Published 2022-03-03 · CVE record · OSV

Products: linux_kernel, redhat 3scale_api_management, redhat build_of_quarkus, redhat codeready_linux_builder_eus, redhat codeready_linux_builder_for_power_little_endian_eus, redhat openshift_container_platform, redhat virtualization, redhat virtualization_host, redhat enterprise_linux_aus, redhat enterprise_linux_eus, redhat enterprise_linux_for_ibm_z_systems_eus, redhat enterprise_linux_for_ibm_z_systems_eus_s390x, redhat enterprise_linux_for_power_little_endian_eus, redhat enterprise_linux_for_real_time, redhat enterprise_linux_for_real_time_for_nfv, redhat enterprise_linux_for_real_time_for_nfv_tus, redhat enterprise_linux_for_real_time_tus, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions, redhat enterprise_linux_server_tus, redhat enterprise_linux_server_update_services_for_sap_solutions, netapp h300s_firmware, netapp h500s_firmware, netapp h700s_firmware, netapp h300e_firmware, netapp h500e_firmware, netapp h700e_firmware, netapp h410s_firmware, netapp h410c_firmware, netapp h610c_firmware, netapp h610s_firmware, netapp h615c_firmware

Distro releases