CVE-2021-32606: In the Linux kernel 5.11 through 5.12.2, isotp_setsockopt in net/can/isotp.c allows privilege escalation to...

Security readout for executives and security teams

CVE-2021-32606 is a Linux kernel bug in CAN ISOTP socket option handling. On systems running kernel 5.11 through 5.12.2 with CAN ISOTP SF_BROADCAST support, a local attacker could escalate privileges to root via use-after-free. This is mainly a host-level risk where untrusted local users or workloads can reach the vulnerable kernel interface. Likely exposure is Linux hosts on kernel 5.11 through 5.12.2 where CAN ISOTP support is present and accessible. The bundle does not identify every affected distribution or configuration. Systems without local untrusted users, containers, or shell access have lower immediate risk but still need kernel inventory review. Prioritize remediation where vulnerable kernels are used by shared servers, developer workstations, container hosts, or appliances with local user access. This is not described as remotely exploitable in the bundle, but successful exploitation could give root control of an affected Linux host. Mitigation focus: Identify Linux systems running kernel 5.11 through 5.12.2.; Prioritize kernel updates from the relevant Linux distribution or vendor.; Review the upstream kernel commit referenced for remediation context..

Prepared

Jun 3, 2026, 02:27 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.