LSN-0078-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 19 Jul 2021, 05:41
Last modified:03 Jun 2026, 13:33

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

19 Jul 2021, 05:41
Published
Vulnerability first disclosed
03 Jun 2026, 13:33
Last Modified
Vulnerability information updated

Description

Kernel Live Patch Security Notice Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of the Linux kernel leading to multiple use-after-free vulnerabilities. A local attacker could use this issue to execute arbitrary code.(CVE-2021-3609)

Affected Systems

  • ubuntu•linux

    all | < 4.15.0-147.151 | < 5.4.0-77.86

  • ubuntu•linux-gcp

    all | < 5.4.0-1046.49

  • ubuntu•linux-gke

    all | < 5.4.0-1046.48

  • ubuntu•linux-gke-4.15

    all

  • ubuntu•linux-gke-5.4

    all | < 5.4.0-1046.48~18.04.1

  • ubuntu•linux-gkeop

    all | < 5.4.0-1018.19

  • ubuntu•linux-gkeop-5.4

    all | < 5.4.0-1018.19~18.04.1

  • ubuntu•linux-hwe

    all | < 4.15.0-147.151~16.04.1

  • ubuntu•linux-hwe-5.4

    all | < 5.4.0-77.86~18.04.1

  • ubuntu•linux-oem

    all

References (2)