Summary
It was discovered that the bluetooth subsystem in the Linux kernel did not
properly handle HCI device initialization failure, leading to a double-free
vulnerability. An attacker could use this to cause a denial of service or
possibly execute arbitrary code. (CVE-2021-3564)
It was discovered that the bluetooth subsystem in the Linux kernel did not
properly handle HCI device detach events, leading to a use-after-free
vulnerability. An attacker could use this to cause a denial of service or
possibly execute arbitrary code. (CVE-2021-3573)
It was discovered that the NFC implementation in the Linux kernel did not
properly handle failed connect events leading to a NULL pointer
dereference. A local attacker could use this to cause a denial of service.
(CVE-2021-3587)
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | linux | 4.15.0-154.161 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-aws | 4.15.0-1110.117 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-azure-4.15 | 4.15.0-1122.135 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gcp-4.15 | 4.15.0-1107.121 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-kvm | 4.15.0-1098.100 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oracle | 4.15.0-1079.87 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-raspi2 | 4.15.0-1094.100 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-snapdragon | 4.15.0-1111.120 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | linux-azure | 4.15.0-1122.135~14.04.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | linux-aws-hwe | 4.15.0-1110.117~16.04.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | linux-azure | 4.15.0-1122.135~16.04.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | linux-gcp | 4.15.0-1107.121~16.04.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | linux-hwe | 4.15.0-154.161~16.04.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | linux-oracle | 4.15.0-1079.87~16.04.1 |
Vulnerabilities 3
-
Unscored —
A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user …
-
Unscored —
A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls i…
-
Unscored —CVE-2021-3587 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-38208. Reason: This candidate is a reservation duplicate of CVE-…