Rewterz Threat Advisory – Multiple Linux Kernel Security Vulnerabilities

Severity

High

Analysis Summary

CVE-2021-38300

Linux Kernel could allow a locally authenticated attacker to gain elevated privileges on the system, caused by an incorrect branches issue in the cBPF JIT compiler for MIPS. By sending a specially-crafted request, an authenticated attacker could exploit this vulnerability to gain elevated privileges to execute arbitrary code in the kernel.

CVE-2021-3752

Linux Kernel is vulnerable to a denial of service, caused by a use-after-free flaw in the Bluetooth module. By sending a specially-crafted payload, a remote attacker could exploit this vulnerability to cause a denial of service condition.

Impact

Code Execution
Privilege Escalation
Denial of Service
Unauthorized Access

Affected Vendors

Linux

Affected Products

Linux Kernel

Remediation

Refer to the Linux Kernel Website for the patch, upgrade, or suggested workaround information.

https://www.kernel.org/

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo