CVE-2021-3455

Name of the Vulnerable Software and Affected Versions: Zephyr versions 2.4.0 and later Zephyr versions 2.5.0 and later

Description: Disconnecting L2CAP channel right after an invalid ATT request can cause a freeze. The issue is related to a Use After Free condition.

Recommendations: For Zephyr versions 2.4.0 and later, consider disabling the L2CAP channel functionality until a patch is available. For Zephyr versions 2.5.0 and later, restrict access to the ATT request module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.