CVE-2021-32606: Fedoraproject Fedora

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

In the Linux kernel 5.11 through 5.12.2, isotp_setsockopt in net/can/isotp.c allows privilege escalation to root by leveraging a use-after-free. (This does not affect earlier versions that lack CAN ISOTP SF_BROADCAST support.)

Affected products

• Fedoraproject Fedora: version 32 only; version 33 only; version 34 only
• Linux Linux Kernel: from 5.11, before 5.12.9 (fixed in 5.12.9)

Published 2021-05-11. Last modified 2026-06-17.