USN-5267-3

Dashboard / Vulnerabilities / USN-5267-3

USN-5267-3

Summary: linux-raspi, linux-raspi-5.4 vulnerabilities

Details: USN-5267-1 fixed vulnerabilities in the Linux kernel. This update provides the corresponding updates for the Linux kernel for Raspberry Pi devices. Original advisory details: It was discovered that the Bluetooth subsystem in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-3640) Likang Luo discovered that a race condition existed in the Bluetooth subsystem of the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-3752) Luo Likang discovered that the FireDTV Firewire driver in the Linux kernel did not properly perform bounds checking in some situations. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-42739)

References: https://ubuntu.com/security/notices/USN-5267-3, https://ubuntu.com/security/CVE-2021-3640, https://ubuntu.com/security/CVE-2021-3752, https://ubuntu.com/security/CVE-2021-42739