CVE-2021-34693: Medium severity Linux Linux kernel vulnerability
Last updated 25 April 2025
Other sources
net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2021-34693?
CVE-2021-34693 has a medium severity rating due to the potential exposure of sensitive information.
How do I fix CVE-2021-34693?
To fix CVE-2021-34693, upgrade to the patched versions of the Linux kernel or the appropriate Debian packages specified in the vulnerability description.
Who is affected by CVE-2021-34693?
CVE-2021-34693 affects local users of Linux kernel versions up to 5.12.10 and specific Debian Linux versions.
What type of vulnerability is CVE-2021-34693?
CVE-2021-34693 is classified as a local information disclosure vulnerability due to uninitialized variables.
Can CVE-2021-34693 allow unauthorized access?
CVE-2021-34693 does not allow remote access but can provide local users access to sensitive kernel stack memory.