CVE-2021-3609: Linux Kernel

High severity, CVSS 7.0. EPSS: 0.4% chance of exploitation in the next 30 days.

.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege escalation to root.

Affected products

  • Linux Linux Kernel: from 2.6.25, before 4.4.276 (fixed in 4.4.276); from 4.5, before 4.9.276 (fixed in 4.9.276); from 4.10, before 4.14.240 (fixed in 4.14.240); from 4.15, before 4.19.198 (fixed in 4.19.198); from 4.20, before 5.4.132 (fixed in 5.4.132); from 5.5.0, before 5.10.50 (fixed in 5.10.50); …
  • Netapp h300e Firmware: affected versions not specified
  • Netapp h300s Firmware: affected versions not specified
  • Netapp h410c Firmware: affected versions not specified
  • Netapp h410s Firmware: affected versions not specified
  • Netapp h500e Firmware: affected versions not specified
  • Netapp h500s Firmware: affected versions not specified
  • Netapp h610c Firmware: affected versions not specified
  • Netapp h610s Firmware: affected versions not specified
  • Netapp h615c Firmware: affected versions not specified
  • Netapp h700e Firmware: affected versions not specified
  • Netapp h700s Firmware: affected versions not specified
  • Red Hat 3scale API Management: version 2.0 only
  • Red Hat Build Of Quarkus: version 1.0 only
  • Red Hat Codeready Linux Builder Eus: version 8.1 only; version 8.2 only; version 8.4 only
  • Red Hat Codeready Linux Builder For Power Little Endian Eus: version 8.1 only; version 8.2 only; version 8.4 only
  • Red Hat Enterprise Linux Aus: version 8.2 only
  • Red Hat Enterprise Linux Eus: version 8.1 only; version 8.2 only; version 8.4 only
  • Red Hat Enterprise Linux For IBM Z Systems Eus: version 8.4 only
  • Red Hat Enterprise Linux For IBM Z Systems Eus s390x: version 8.1 only
  • Red Hat Enterprise Linux For Power Little Endian Eus: version 8.1 only; version 8.2 only; version 8.4 only
  • Red Hat Enterprise Linux For Real Time: version 8.0 only
  • Red Hat Enterprise Linux For Real Time For Nfv: version 8.0 only
  • Red Hat Enterprise Linux For Real Time For Nfv Tus: version 8.0 only; version 8.2 only
  • Red Hat Enterprise Linux For Real Time Tus: version 8.0 only; version 8.2 only
  • and 7 more

Published 2022-03-03. Last modified 2026-06-17.