CVE-2021-3573: Race Condition
A flaw use-after-free in function hcisockboundioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hciunregisterdev() together with one of the calls hcisockblacklistadd(), hcisockblacklistdel(), hcigetconninfo(), hcigetauthinfo(). A privileged local user could use this flaw to crash the system or escalate their privileges on the system.
Other sources
A use-after-free in function hcisockboundioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hciunregisterdev() together with one of the calls hcisockblacklistadd(), hcisockblacklistdel(), hcigetconninfo(), hcigetauthinfo(). A privileged local user could use this flaw to crash the system or escalate their privileges on the system. This flaw affects the Linux kernel versions prior to 5.13-rc5.
A use-after-free vulnerability was found in the Linux kernel in function hcisockboundioctl(). It can allow attackers to corrupt kernel heaps (kmalloc-8k to be specific) and adopt further exploitations.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:3.10.0-1160.59.1.rt56.1200.el7 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:3.10.0-1160.59.1.el7 - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:4.18.0-348.rt7.130.el8 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:4.18.0-348.el8 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 5.13 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5.13-rc5
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2021-3573?
CVE-2021-3573 is classified as a high severity vulnerability due to its potential impact on the Linux kernel's HCI subsystem.
How do I fix CVE-2021-3573?
To fix CVE-2021-3573, update your Linux kernel to version 0:3.10.0-1160.59.1.el7 or higher, or use the corresponding patched kernel versions for your distribution.
What versions of the Linux kernel are affected by CVE-2021-3573?
CVE-2021-3573 affects various versions of the Linux kernel up to 5.13, including specific versions like 3.10.x and 4.18.x.
What types of systems are impacted by CVE-2021-3573?
CVE-2021-3573 impacts systems running affected versions of the Linux kernel, such as Red Hat Enterprise Linux, Fedora, and Debian.
Is CVE-2021-3573 a zero-day vulnerability?
No, CVE-2021-3573 is not a zero-day vulnerability as it has been publicly disclosed and patches are available.