CVE-2021-34693

Published: Jun 14, 2021

Modified: Aug 4, 2024

PUBLISHED

Description

net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://lore.kernel.org/netdev/trinity-87eaea25-2a7d-4aa9-92a5-269b822e5d95-1623609211076%403c-app-gmx-bs04/T/

[oss-security] 20210615 CVE-2021-34693: Infoleak in CAN BCM protocol in Linux kernel

mailing-list

[debian-lts-announce] 20210720 [SECURITY] [DLA 2713-2] linux security update

mailing-list

[debian-lts-announce] 20210720 [SECURITY] [DLA 2713-1] linux security update

mailing-list

[debian-lts-announce] 20210720 [SECURITY] [DLA 2714-1] linux-4.19 security update

mailing-list

DSA-4941

vendor-advisory

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5e87ddbe3942e27e939bdc02deb8579b0cbd8ecc

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2021-34693

Description

Affected Products

References