CVE-2021-3609

.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege escalation to root.

CVSS v3.1

7.0 HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.43% chance of exploitation in the next 30 days, 36th percentile

Published

2022-03-03

Updated

2024-08-03

Proof-of-concept exploits (1)

• nrb547/kernel-exploitation/blob/main/cve-2021-3609/cve-2021-3609.md

References

• CVE Record
• NVD entry

Related

• CVE-2021-35975
• CVE-2021-36159
• CVE-2021-35973
• CVE-2021-36165
• CVE-2021-3596
• CVE-2021-36224