CVE-2021-3609

HIGH CVSS: 7.0 Published: 2022-03-03 Modified: 2026-06-17

Description

.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege escalation to root.

Affected Platforms

Netapp H615CRedhat Virtualization HostRedhat Enterprise Linux For Ibm Z Systems EusNetapp H300S FirmwareNetapp H700E FirmwareRedhat Enterprise Linux For Real Time For Nfv TusNetapp H610SRedhat Codeready Linux Builder For Power Little Endian EusLinux Linux KernelRedhat Build Of Quarkus

Weakness Type

CWE-362, CWE-362

References

https://bugzilla.redhat.com/show_bug.cgi?id=1971651
https://github.com/nrb547/kernel-exploitation/blob/main/cve-2021-3609/cve-2021-3…
https://github.com/torvalds/linux/commit/d5f9023fa61ee8b94f37a93f08e94b136cf1e46…
https://security.netapp.com/advisory/ntap-20220419-0004/
https://www.openwall.com/lists/oss-security/2021/06/19/1
https://bugzilla.redhat.com/show_bug.cgi?id=1971651