CVE-2021-34693

תיאור (מקור, אנגלית)

net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized.

מדדים

CVSS 3.1

5.5 (MEDIUM) מקור הציון: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-18/10/2026

CWE

CWE-909

מוצרים מושפעים

linux: linux kernel; debian: debian linux

קישורים

• http://www.openwall.com/lists/oss-security/2021/06/15/1 ExploitMailing ListPatchThird Party Advisory
• http://www.openwall.com/lists/oss-security/2021/06/15/1 ExploitMailing ListPatchThird Party Advisory
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5e8‮…
• https://lists.debian.org/debian-lts-announce/2021/07/msg00014.html Mailing ListThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/07/msg00015.html Mailing ListThird Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/07/msg00016.html Mailing ListThird Party Advisory
• https://lore.kernel.org/netdev/trinity-87eaea25-2a7d-4aa9-92a5-269b822e5d95-16‮…
• https://www.debian.org/security/2021/dsa-4941 Third Party Advisory
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5e8‮…
• https://lists.debian.org/debian-lts-announce/2021/07/msg00014.html Mailing ListThird Party Advisory