CVE-2021-32606(fedoraproject / fedora)

LOWCVSS 7.8 · HIGH

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel 5.11 through 5.12.2, isotp_setsockopt in net/can/isotp.c allows privilege escalation to root by leveraging a use-after-free. (This does not affect earlier versions that lack CAN ISOTP SF_BROADCAST support.)

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • fedora
  • linux_kernel

Affected systems

Products
fedoralinux_kernel

3 versions affected across 2 products

Deep dive

Full discourse1 post
  • DailyCVE@dailycve

    🔴 Security-Notes, Repository Release Management, #CVE-2021-32606 (Critical) -DC-Oct2026-3732 https://dailycve.com/security-notes-repository-release-management-cve-2021-32606-critical-dc-oct2026-3732/

    0000024
    245 followersView on X
CPE platform detail4 entries

4 of 4 entries

PartVendorProductVersionTarget SWTarget HW
OSfedoraprojectfedora32--
OSfedoraprojectfedora33--
OSfedoraprojectfedora34--
OSlinuxlinux_kernel---

Explore more