Double Free in Linux kernel - CVE-2021-3564

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU63660

Double Free in Linux kernel - CVE-2021-3564

Published: May 25, 2022 / Updated: May 25, 2022


Vulnerability identifier: #VU63660
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-3564
CWE-ID: CWE-415
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local attacker to perform a denial of service attack.

The vulnerability exists due to bluetooth subsystem in the Linux kernel does not properly handle HCI device detach events. An attacker with physical access to the system can trigger double free error and perform a denial of service attack.


Affected software

Linux kernel
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for x86_64
Slackware Linux
Ubuntu
openEuler
linux-image-aws-hwe (Ubuntu package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
kernel-doc
kernel-abi-whitelists
python-perf
perf
kernel-tools-libs-devel
kernel-tools-libs
kernel-tools
kernel-headers
kernel-devel
kernel-debug-devel
kernel-debug
kernel
bpftool
linux-image-generic (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-4.4.0-219-lowlatency (Ubuntu package)
linux-image-4.4.0-1100-kvm (Ubuntu package)
linux-image-4.4.0-1135-aws (Ubuntu package)
linux-image-4.4.0-219-generic (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-generic-lts-xenial (Ubuntu package)
linux-image-4.4.0-1099-aws (Ubuntu package)
linux-image-lowlatency-lts-xenial (Ubuntu package)
linux-image-virtual-lts-xenial (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-4.4.276/kernel-modules
linux-4.4.276/kernel-huge
linux-4.4.276/kernel-generic
linux-4.4.276/kernel-headers
linux-image-generic-lpae (Ubuntu package)
linux-image-4.15.0-154-lowlatency (Ubuntu package)
linux-image-4.15.0-154-generic-lpae (Ubuntu package)
linux-image-4.15.0-154-generic (Ubuntu package)
linux-image-lowlatency-hwe-16.04 (Ubuntu package)
linux-image-generic-hwe-16.04 (Ubuntu package)
linux-image-virtual-hwe-16.04 (Ubuntu package)
linux-image-4.15.0-1079-oracle (Ubuntu package)
linux-image-oracle-lts-18.04 (Ubuntu package)
linux-image-raspi2 (Ubuntu package)
linux-image-4.15.0-1094-raspi2 (Ubuntu package)
linux-image-4.15.0-1098-kvm (Ubuntu package)
linux-image-4.15.0-1107-gcp (Ubuntu package)
linux-image-gcp-lts-18.04 (Ubuntu package)
linux-image-aws-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1110-aws (Ubuntu package)
linux-image-snapdragon (Ubuntu package)
linux-image-4.15.0-1111-snapdragon (Ubuntu package)
linux-image-azure-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1122-azure (Ubuntu package)
kernel-debuginfo
python3-perf-debuginfo
kernel-tools-debuginfo
python3-perf
python2-perf
kernel-debugsource
python2-perf-debuginfo
perf-debuginfo
bpftool-debuginfo
kernel-source
kernel-tools-devel
kernel-debug-modules-extra
kernel-modules-internal
kernel-modules-extra
kernel-modules
kernel-debug-modules
kernel-debug-core
kernel-core
linux-image-oem (Ubuntu package)
linux-image-oem-osp1 (Ubuntu package)
linux-image-5.4.0-81-generic-lpae (Ubuntu package)
linux-image-5.4.0-81-generic (Ubuntu package)
linux-image-5.4.0-81-lowlatency (Ubuntu package)
linux-image-virtual-hwe-18.04 (Ubuntu package)
linux-image-lowlatency-hwe-18.04 (Ubuntu package)
linux-image-generic-hwe-18.04 (Ubuntu package)
linux-image-snapdragon-hwe-18.04 (Ubuntu package)
linux-image-generic-lpae-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1022-gkeop (Ubuntu package)
linux-image-gkeop-5.4 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-raspi-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1042-raspi (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-5.4.0-1045-kvm (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-5.4.0-1051-gke (Ubuntu package)
linux-image-gke-5.4 (Ubuntu package)
linux-image-5.4.0-1051-gcp (Ubuntu package)
linux-image-gcp-lts-20.04 (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-oracle-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1053-oracle (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-aws-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1055-aws (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-azure-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1056-azure (Ubuntu package)
linux-image-5.8.0-1038-oracle (Ubuntu package)
linux-image-5.8.0-1039-gcp (Ubuntu package)
linux-image-5.8.0-1040-azure (Ubuntu package)
linux-image-5.8.0-1042-aws (Ubuntu package)
linux-image-oem-20.04b (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-5.10.0-1038-oem (Ubuntu package)
linux-image-5.11.0-27-lowlatency (Ubuntu package)
linux-image-5.11.0-27-generic (Ubuntu package)
linux-image-5.11.0-27-generic-64k (Ubuntu package)
linux-image-5.11.0-27-generic-lpae (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-5.11.0-31-generic (Ubuntu package)
linux-image-5.11.0-31-lowlatency (Ubuntu package)
linux-image-5.11.0-31-generic-64k (Ubuntu package)
linux-image-5.11.0-31-generic-lpae (Ubuntu package)
linux-image-5.11.0-1013-azure (Ubuntu package)
linux-image-5.11.0-1014-kvm (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-5.11.0-1016-raspi-nolpae (Ubuntu package)
linux-image-5.11.0-1016-oracle (Ubuntu package)
linux-image-5.11.0-1016-aws (Ubuntu package)
linux-image-5.11.0-1016-raspi (Ubuntu package)
linux-image-5.11.0-1017-gcp (Ubuntu package)
CTPView
Juniper Junos Space

How to mitigate CVE-2021-3564

Install updates from vendor's website.

linux-image-aws-hwe (Ubuntu package) - update to Ubuntu Pro (Infra-only)
kernel (Red Hat package) - addressed in versions 3.10.0-1160.59.1.el7, 4.18.0-348.el8
kernel-rt (Red Hat package) - addressed in versions 3.10.0-1160.59.1.rt56.1200.el7, 4.18.0-348.rt7.130.el8
kernel-doc - update to 3.10.0-1160.59.1.0.1
kernel-abi-whitelists - update to 3.10.0-1160.59.1.0.1
python-perf - update to 3.10.0-1160.59.1.0.1
perf - addressed in versions 3.10.0-1160.59.1.0.1, 4.19.91-25.6
kernel-tools-libs-devel - addressed in versions 3.10.0-1160.59.1.0.1, 4.19.91-25.6
kernel-tools-libs - addressed in versions 3.10.0-1160.59.1.0.1, 4.19.91-25.6
kernel-tools - addressed in versions 3.10.0-1160.59.1.0.1, 4.19.91-25.6
kernel-headers - addressed in versions 3.10.0-1160.59.1.0.1, 4.19.91-25.6
kernel-devel - addressed in versions 3.10.0-1160.59.1.0.1, 4.19.91-25.6
kernel-debug-devel - addressed in versions 3.10.0-1160.59.1.0.1, 4.19.91-25.6
kernel-debug - addressed in versions 3.10.0-1160.59.1.0.1, 4.19.91-25.6
kernel - addressed in versions 3.10.0-1160.59.1.0.1, 4.19.91-25.6
bpftool - addressed in versions 3.10.0-1160.59.1.0.1, 4.19.91-25.6
linux-image-generic (Ubuntu package) - addressed in versions 4.4.0.219.226, 4.15.0.154.143, 5.4.0.81.85, 5.11.0.31.33
linux-image-aws (Ubuntu package) - addressed in versions 4.4.0.219.226, 5.4.0.1055.38, 5.8.0.1042.44~20.04.14, 5.11.0.1016.17
linux-image-4.4.0-219-lowlatency (Ubuntu package) - update to 4.4.0.219.226
linux-image-4.4.0-1100-kvm (Ubuntu package) - update to 4.4.0.219.226
linux-image-4.4.0-1135-aws (Ubuntu package) - update to 4.4.0.219.226
linux-image-4.4.0-219-generic (Ubuntu package) - update to 4.4.0.219.226
linux-image-kvm (Ubuntu package) - addressed in versions 4.4.0.219.226, 4.15.0.1098.94, 5.4.0.1045.44, 5.11.0.1014.15
linux-image-lowlatency (Ubuntu package) - addressed in versions 4.4.0.219.226, 4.15.0.154.143, 5.4.0.81.85, 5.11.0.31.33
linux-image-generic-lts-xenial (Ubuntu package) - update to 4.4.0.219.226
linux-image-4.4.0-1099-aws (Ubuntu package) - update to 4.4.0.219.226
linux-image-lowlatency-lts-xenial (Ubuntu package) - update to 4.4.0.219.226
linux-image-virtual-lts-xenial (Ubuntu package) - update to 4.4.0.219.226
linux-image-virtual (Ubuntu package) - addressed in versions 4.4.0.219.226, 4.15.0.154.143, 5.4.0.81.85, 5.11.0.31.33
linux-4.4.276/kernel-modules - update to 4.4.276
linux-4.4.276/kernel-huge - update to 4.4.276
linux-4.4.276/kernel-generic - update to 4.4.276
linux-4.4.276/kernel-headers - update to 4.4.276_smp
linux-image-generic-lpae (Ubuntu package) - addressed in versions 4.15.0.154.143, 5.4.0.81.85, 5.11.0.31.33
linux-image-4.15.0-154-lowlatency (Ubuntu package) - update to 4.15.0-154.161
linux-image-4.15.0-154-generic-lpae (Ubuntu package) - update to 4.15.0-154.161
linux-image-4.15.0-154-generic (Ubuntu package) - update to 4.15.0-154.161
linux-image-lowlatency-hwe-16.04 (Ubuntu package) - update to 4.15.0.210.193
linux-image-generic-hwe-16.04 (Ubuntu package) - update to 4.15.0.210.193
linux-image-virtual-hwe-16.04 (Ubuntu package) - update to 4.15.0.210.193
linux-image-4.15.0-1079-oracle (Ubuntu package) - update to 4.15.0-1079.87
linux-image-oracle-lts-18.04 (Ubuntu package) - update to 4.15.0.1079.89
linux-image-raspi2 (Ubuntu package) - addressed in versions 4.15.0.1094.92, 5.4.0.1042.77
linux-image-4.15.0-1094-raspi2 (Ubuntu package) - update to 4.15.0-1094.100
linux-image-4.15.0-1098-kvm (Ubuntu package) - update to 4.15.0-1098.100
linux-image-4.15.0-1107-gcp (Ubuntu package) - update to 4.15.0-1107.121
linux-image-gcp-lts-18.04 (Ubuntu package) - update to 4.15.0.1107.126
linux-image-aws-lts-18.04 (Ubuntu package) - update to 4.15.0.1110.113
linux-image-4.15.0-1110-aws (Ubuntu package) - update to 4.15.0-1110.117
linux-image-snapdragon (Ubuntu package) - update to 4.15.0.1111.114
linux-image-4.15.0-1111-snapdragon (Ubuntu package) - update to 4.15.0-1111.120
linux-image-azure-lts-18.04 (Ubuntu package) - update to 4.15.0.1122.95
linux-image-4.15.0-1122-azure (Ubuntu package) - update to 4.15.0-1122.135
kernel-devel - update to 4.19.90-2106.3.0.0095
kernel-debuginfo - update to 4.19.90-2106.3.0.0095
python3-perf-debuginfo - update to 4.19.90-2106.3.0.0095
kernel-tools-debuginfo - update to 4.19.90-2106.3.0.0095
python3-perf - update to 4.19.90-2106.3.0.0095
python2-perf - update to 4.19.90-2106.3.0.0095
kernel-debugsource - update to 4.19.90-2106.3.0.0095
python2-perf-debuginfo - update to 4.19.90-2106.3.0.0095
perf-debuginfo - update to 4.19.90-2106.3.0.0095
kernel-tools - update to 4.19.90-2106.3.0.0095
bpftool-debuginfo - update to 4.19.90-2106.3.0.0095
kernel-source - update to 4.19.90-2106.3.0.0095
perf - update to 4.19.90-2106.3.0.0095
kernel - update to 4.19.90-2106.3.0.0095
bpftool - update to 4.19.90-2106.3.0.0095
kernel-tools-devel - update to 4.19.90-2106.3.0.0095
kernel-debug-modules-extra - update to 4.19.91-25.6
python3-perf - update to 4.19.91-25.6
kernel-modules-internal - update to 4.19.91-25.6
kernel-modules-extra - update to 4.19.91-25.6
kernel-modules - update to 4.19.91-25.6
kernel-debug-modules - update to 4.19.91-25.6
kernel-debug-core - update to 4.19.91-25.6
kernel-core - update to 4.19.91-25.6
linux-image-oem (Ubuntu package) - addressed in versions 5.4.0.81.85, 5.4.0.81.91~18.04.73, 5.4.0.202.198
linux-image-oem-osp1 (Ubuntu package) - addressed in versions 5.4.0.81.85, 5.4.0.81.91~18.04.73
linux-image-5.4.0-81-generic-lpae (Ubuntu package) - addressed in versions 5.4.0-81.91, 5.4.0-81.91~18.04.1
linux-image-5.4.0-81-generic (Ubuntu package) - addressed in versions 5.4.0-81.91, 5.4.0-81.91~18.04.1
linux-image-5.4.0-81-lowlatency (Ubuntu package) - addressed in versions 5.4.0-81.91, 5.4.0-81.91~18.04.1
linux-image-virtual-hwe-18.04 (Ubuntu package) - update to 5.4.0.81.91~18.04.73
linux-image-lowlatency-hwe-18.04 (Ubuntu package) - update to 5.4.0.81.91~18.04.73
linux-image-generic-hwe-18.04 (Ubuntu package) - update to 5.4.0.81.91~18.04.73
linux-image-snapdragon-hwe-18.04 (Ubuntu package) - update to 5.4.0.81.91~18.04.73
linux-image-generic-lpae-hwe-18.04 (Ubuntu package) - update to 5.4.0.81.91~18.04.73
linux-image-5.4.0-1022-gkeop (Ubuntu package) - addressed in versions 5.4.0-1022.23, 5.4.0-1022.23~18.04.1
linux-image-gkeop-5.4 (Ubuntu package) - addressed in versions 5.4.0.1022.23~18.04.23, 5.4.0.1022.25
linux-image-gkeop (Ubuntu package) - update to 5.4.0.1022.25
linux-image-raspi-hwe-18.04 (Ubuntu package) - update to 5.4.0.1042.45
linux-image-5.4.0-1042-raspi (Ubuntu package) - addressed in versions 5.4.0-1042.46, 5.4.0-1042.46~18.04.3
linux-image-raspi (Ubuntu package) - addressed in versions 5.4.0.1042.77, 5.11.0.1016.14
linux-image-5.4.0-1045-kvm (Ubuntu package) - update to 5.4.0-1045.47
linux-image-gcp (Ubuntu package) - addressed in versions 5.4.0.1051.37, 5.8.0.1039.14, 5.11.0.1017.17, 6.8.0-1019.21~22.04.1
linux-image-5.4.0-1051-gke (Ubuntu package) - addressed in versions 5.4.0-1051.54, 5.4.0-1051.54~18.04.1
linux-image-gke-5.4 (Ubuntu package) - addressed in versions 5.4.0.1051.54~18.04.16, 5.4.0.1051.61
linux-image-5.4.0-1051-gcp (Ubuntu package) - addressed in versions 5.4.0-1051.55, 5.4.0-1051.55~18.04.1
linux-image-gcp-lts-20.04 (Ubuntu package) - update to 5.4.0.1051.61
linux-image-gke (Ubuntu package) - addressed in versions 5.4.0.1051.61, 5.11.0.1017.17, 6.8.0-1015.19
linux-image-oracle-lts-20.04 (Ubuntu package) - update to 5.4.0.1053.53
linux-image-5.4.0-1053-oracle (Ubuntu package) - addressed in versions 5.4.0-1053.57, 5.4.0-1053.57~18.04.1
linux-image-oracle (Ubuntu package) - addressed in versions 5.4.0.1053.57~18.04.33, 5.8.0.1038.39~20.04.14, 5.11.0.1016.17, 6.8.0-1017.18~22.04.1
linux-image-aws-lts-20.04 (Ubuntu package) - update to 5.4.0.1055.58
linux-image-5.4.0-1055-aws (Ubuntu package) - addressed in versions 5.4.0-1055.58, 5.4.0-1055.58~18.04.1
linux-image-azure (Ubuntu package) - addressed in versions 5.4.0.1056.36, 5.8.0.1040.43~20.04.12, 5.11.0.1013.14, 6.8.0-1018.21~22.04.1
linux-image-azure-lts-20.04 (Ubuntu package) - update to 5.4.0.1056.54
linux-image-5.4.0-1056-azure (Ubuntu package) - addressed in versions 5.4.0-1056.58, 5.4.0-1056.58~18.04.1
linux-image-5.8.0-1038-oracle (Ubuntu package) - update to 5.8.0-1038.39~20.04.1
linux-image-5.8.0-1039-gcp (Ubuntu package) - update to 5.8.0-1039.41
linux-image-5.8.0-1040-azure (Ubuntu package) - update to 5.8.0-1040.43~20.04.1
linux-image-5.8.0-1042-aws (Ubuntu package) - update to 5.8.0-1042.44~20.04.1
linux-image-oem-20.04b (Ubuntu package) - update to 5.10.0.1038.40
linux-image-oem-20.04 (Ubuntu package) - addressed in versions 5.10.0.1038.40, 5.11.0.31.33
linux-image-5.10.0-1038-oem (Ubuntu package) - update to 5.10.0-1038.40
linux-image-5.11.0-27-lowlatency (Ubuntu package) - update to 5.11.0-27.29~20.04.1
linux-image-5.11.0-27-generic (Ubuntu package) - update to 5.11.0-27.29~20.04.1
linux-image-5.11.0-27-generic-64k (Ubuntu package) - update to 5.11.0-27.29~20.04.1
linux-image-5.11.0-27-generic-lpae (Ubuntu package) - update to 5.11.0-27.29~20.04.1
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.11.0.27.29~20.04.11
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.11.0.27.29~20.04.11
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.11.0.27.29~20.04.11
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.11.0.27.29~20.04.11
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.11.0.27.29~20.04.11
linux-image-generic-64k (Ubuntu package) - update to 5.11.0.31.33
linux-image-5.11.0-31-generic (Ubuntu package) - update to 5.11.0-31.33
linux-image-5.11.0-31-lowlatency (Ubuntu package) - update to 5.11.0-31.33
linux-image-5.11.0-31-generic-64k (Ubuntu package) - update to 5.11.0-31.33
linux-image-5.11.0-31-generic-lpae (Ubuntu package) - update to 5.11.0-31.33
linux-image-5.11.0-1013-azure (Ubuntu package) - update to 5.11.0-1013.14
linux-image-5.11.0-1014-kvm (Ubuntu package) - update to 5.11.0-1014.15
linux-image-raspi-nolpae (Ubuntu package) - update to 5.11.0.1016.14
linux-image-5.11.0-1016-raspi-nolpae (Ubuntu package) - update to 5.11.0-1016.17
linux-image-5.11.0-1016-oracle (Ubuntu package) - update to 5.11.0-1016.17
linux-image-5.11.0-1016-aws (Ubuntu package) - update to 5.11.0-1016.17
linux-image-5.11.0-1016-raspi (Ubuntu package) - update to 5.11.0-1016.17
linux-image-5.11.0-1017-gcp (Ubuntu package) - update to 5.11.0-1017.19
CTPView - update to 9.1R5
Juniper Junos Space - update to 22.2R1

External References

Related Security Bulletins