Severity
High
Analysis Summary
CVE-2021-38300
Linux Kernel could allow a locally authenticated attacker to gain elevated privileges on the system, caused by an incorrect branches issue in the cBPF JIT compiler for MIPS. By sending a specially-crafted request, an authenticated attacker could exploit this vulnerability to gain elevated privileges to execute arbitrary code in the kernel.
CVE-2021-3752
Linux Kernel is vulnerable to a denial of service, caused by a use-after-free flaw in the Bluetooth module. By sending a specially-crafted payload, a remote attacker could exploit this vulnerability to cause a denial of service condition.
Impact
- Code Execution
- Privilege Escalation
- Denial of Service
- Unauthorized Access
Affected Vendors
- Linux
Affected Products
- Linux Kernel
Remediation
Refer to the Linux Kernel Website for the patch, upgrade, or suggested workaround information.