CVE-2021-34693: Debian Linux

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized.

Affected products

• Debian Debian Linux: version 9.0 only; version 10.0 only
• Linux Linux Kernel: from 2.6.25, up to and including 5.12.10

Published 2021-06-14. Last modified 2026-10-08.