Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2023-53017

Bluetooth: hci_sync: fix memory leak in hci_update_adv_data()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix memory leak in hci_update_adv_data() When hci_cmd_sync_queue() failed in hci_update_adv_data(), inst_ptr is not freed, which will cause memory leak, convert to use ERR_PTR/PTR_ERR to pass the instance to callback so no memory needs to be allocated.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 651cd3d65b0f76a2198fcf3a80ce5d53dd267717 to < 8ac6043bd3e5b58d30f50737aedc2e58e8087ad5affected
  • 651cd3d65b0f76a2198fcf3a80ce5d53dd267717 to < 1ed8b37cbaf14574c779064ef1372af62e8ba6aaaffected

Linux Linux

Default version status: affected

  • 6.1affected
  • 0 to < 6.1unaffected
  • 6.1.9 to ≤ 6.1.*unaffected
  • 6.2 to ≤ *unaffected

References