UBUNTU-CVE-2021-3564
Vulnerability Summary
Timeline
Description
A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluetooth device. A local user could use this flaw to crash the system. This flaw affects all the Linux kernel versions starting from 3.13.
CVSS Metrics
- v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Systems
- ubuntu•linux
all | < 4.4.0-219.252 | < 4.15.0-154.161 | < 5.4.0-81.91
- ubuntu•linux-aws
< 4.4.0-1099.104 | < 4.4.0-1135.149 | < 4.15.0-1110.117 | < 5.4.0-1055.58
- ubuntu•linux-aws-5.0
all
- ubuntu•linux-aws-5.11
< 5.11.0-1016.17~20.04.1
- ubuntu•linux-aws-5.3
all
- ubuntu•linux-aws-5.4
< 5.4.0-1055.58~18.04.1
- ubuntu•linux-aws-5.8
< 5.8.0-1042.44~20.04.1
- ubuntu•linux-aws-fips
< 4.15.0-2052.54 | all | < 5.4.0-1069.73+fips2
- ubuntu•linux-aws-hwe
< 4.15.0-1110.117~16.04.1
- ubuntu•linux-azure
< 4.15.0-1122.135~14.04.1 | < 4.15.0-1122.135~16.04.1 | all | < 5.4.0-1056.58
- ubuntu•linux-azure-4.15
< 4.15.0-1122.135
- ubuntu•linux-azure-5.11
< 5.11.0-1013.14~20.04.1
- ubuntu•linux-azure-5.3
all
- ubuntu•linux-azure-5.4
< 5.4.0-1056.58~18.04.1
- ubuntu•linux-azure-5.8
< 5.8.0-1040.43~20.04.1
- ubuntu•linux-azure-edge
all
- ubuntu•linux-azure-fde-5.15
all
- ubuntu•linux-azure-fips
< 4.15.0-2034.38 | all | < 5.4.0-1073.76+fips1
- ubuntu•linux-bluefield
< 5.4.0-1019.22 | all
- ubuntu•linux-dell300x
< 4.15.0-1027.32
- ubuntu•linux-fips
< 4.4.0-1069.75 | all | < 4.15.0-1068.77 | < 5.4.0-1032.37
- ubuntu•linux-gcp
< 4.15.0-1107.121~16.04.1 | all | < 5.4.0-1051.55
- ubuntu•linux-gcp-4.15
< 4.15.0-1107.121
- ubuntu•linux-gcp-5.11
< 5.11.0-1017.19~20.04.1
- ubuntu•linux-gcp-5.3
all
- ubuntu•linux-gcp-5.4
< 5.4.0-1051.55~18.04.1
- ubuntu•linux-gcp-5.8
< 5.8.0-1039.41
- ubuntu•linux-gcp-edge
all
- ubuntu•linux-gcp-fips
< 4.15.0-2017.19 | all | < 5.4.0-1067.71~20.04.1
- ubuntu•linux-gke
< 5.4.0-1051.54
- ubuntu•linux-gke-4.15
all
- ubuntu•linux-gke-5.4
< 5.4.0-1051.54~18.04.1
- ubuntu•linux-gkeop
< 5.4.0-1022.23
- ubuntu•linux-gkeop-5.4
< 5.4.0-1022.23~18.04.1
- ubuntu•linux-hwe
< 4.15.0-154.161~16.04.1 | all
- ubuntu•linux-hwe-5.11
< 5.11.0-34.36~20.04.1
- ubuntu•linux-hwe-5.4
< 5.4.0-81.91~18.04.1
- ubuntu•linux-hwe-5.8
all
- ubuntu•linux-hwe-edge
all | all
- ubuntu•linux-intel-iot-realtime
all
- ubuntu•linux-kvm
< 4.4.0-1100.109 | < 4.15.0-1098.100 | < 5.4.0-1045.47
- ubuntu•linux-lts-xenial
< 4.4.0-219.252~14.04.1
- ubuntu•linux-nvidia
all
- ubuntu•linux-oem
all
- ubuntu•linux-oem-5.10
< 5.10.0-1038.40
- ubuntu•linux-oem-5.6
all
- ubuntu•linux-oracle
< 4.15.0-1079.87~16.04.1 | < 4.15.0-1079.87 | < 5.4.0-1053.57
- ubuntu•linux-oracle-5.0
all
- ubuntu•linux-oracle-5.11
< 5.11.0-1016.17~20.04.1
- ubuntu•linux-oracle-5.3
all
Showing first 50 affected entries in server-rendered view.
References (11)
- https://ubuntu.com/security/CVE-2021-3564
- https://www.openwall.com/lists/oss-security/2021/05/25/1
- https://lore.kernel.org/linux-bluetooth/20210525123902.189012-1-gregkh@linuxfoundation.org/
- https://ubuntu.com/security/notices/USN-5015-1
- https://ubuntu.com/security/notices/USN-5044-1
- https://ubuntu.com/security/notices/USN-5045-1
- https://ubuntu.com/security/notices/USN-5046-1
- https://ubuntu.com/security/notices/USN-5050-1
- https://ubuntu.com/security/notices/USN-5299-1
- https://ubuntu.com/security/notices/USN-5343-1
- https://www.cve.org/CVERecord?id=CVE-2021-3564