https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 06:32:27 +0000 https://vulnerability.circl.lu/vuln/cve-2021-3640 <p><strong>Affected:</strong> kernel</p> <p>A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sendmsg() with the expected controllable faulting memory page. A privileged local user could use this flaw to crash the system or escalate their privileges on the system.</p> <p><strong>Affected:</strong> kernel</p> <p>A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sendmsg() with the expected controllable faulting memory page. A privileged local user could use this flaw to crash the system or escalate their privileges on the system.</p> https://vulnerability.circl.lu/vuln/cve-2021-3640 https://vulnerability.circl.lu/vuln/usn-5265-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: linux-aws-5.11, Ubuntu:20.04:LTS: linux-aws-5.13, Ubuntu:20.04:LTS: linux-azure-5.11, Ubuntu:20.04:LTS: linux-gcp-5.11, Ubuntu:20.04:LTS: linux-hwe-5.13, Ubuntu:20.04:LTS: linux-oem-5.13, Ubuntu:20.04:LTS: linux-oracle-5.11</p> <p>Jeremy Cline discovered a use-after-free in the nouveau graphics driver of the Linux kernel during device removal. A privileged or physically proximate attacker could use this to cause a denial of service (system crash). (CVE-2020-27820)</p> <p>It was discovered that the Bluetooth subsystem in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-3640)</p> <p>Likang Luo discovered that a race condition existed in the Bluetooth subsystem of the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-3752)</p> <p>It was discovered that the SCTP protocol implementation in the Linux kernel did not properly verify VTAGs in some situations. A remote attacker could possibly use this to cause a denial of service (connection disassociation). (CVE-2021-3772)</p> <p>It was discovered that the eBPF implementation in the Linux kernel contained a race condition around read-only maps. A privileged attacker could use this to modify read-only maps. (CVE-2021-4001)</p> <p>It was discovered that the NFS server implementation in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-4090)</p> <p>Felix Wilhelm discovered that the KVM implementation in the…</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: linux-aws-5.11, Ubuntu:20.04:LTS: linux-aws-5.13, Ubuntu:20.04:LTS: linux-azure-5.11, Ubuntu:20.04:LTS: linux-gcp-5.11, Ubuntu:20.04:LTS: linux-hwe-5.13, Ubuntu:20.04:LTS: linux-oem-5.13, Ubuntu:20.04:LTS: linux-oracle-5.11</p> <p>Jeremy Cline discovered a use-after-free in the nouveau graphics driver of the Linux kernel during device removal. A privileged or physically proximate attacker could use this to cause a denial of service (system crash). (CVE-2020-27820)</p> <p>It was discovered that the Bluetooth subsystem in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-3640)</p> <p>Likang Luo discovered that a race condition existed in the Bluetooth subsystem of the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-3752)</p> <p>It was discovered that the SCTP protocol implementation in the Linux kernel did not properly verify VTAGs in some situations. A remote attacker could possibly use this to cause a denial of service (connection disassociation). (CVE-2021-3772)</p> <p>It was discovered that the eBPF implementation in the Linux kernel contained a race condition around read-only maps. A privileged attacker could use this to modify read-only maps. (CVE-2021-4001)</p> <p>It was discovered that the NFS server implementation in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-4090)</p> <p>Felix Wilhelm discovered that the KVM implementation in the…</p> https://vulnerability.circl.lu/vuln/usn-5265-1