CVE-2021-3659

moderate-risk
Published 2022-08-22

A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection. This flaw allows a local user to crash the system. The highest threat from this vulnerability is to system availability.

Do I need to act?

-
0.02% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (16)

Affected Vendors

Redhat Linux Fedoraproject

References (6)

Third Party Advisory https://access.redhat.com/security/cve/CVE-2021-3659
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=1975949
Patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=11...
Third Party Advisory https://access.redhat.com/security/cve/CVE-2021-3659
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=1975949
Patch https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=11...
36
/ 100
moderate-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 18/34 · Moderate