Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-53827

Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp}

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} Similar to commit d0be8347c623 ("Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put"), just use l2cap_chan_hold_unless_zero to prevent referencing a channel that is about to be destroyed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 to < f2d38e77aa5f3effc143e7dd24da8acf02925958affected
  • 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 to < 1351551aa9058e07a20a27a158270cf84fcde621affected
  • 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 to < c02421992505c95c7f3c9ad59ee35e22eac60988affected
  • 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 to < d9ba36c22a7bb09d6bac4cc2f243eff05da53f43affected
  • 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 to < ac6725a634f7e8c0330610a8527f20c730b61115affected
  • 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 to < 348d446762e7c70778df8bafbdf3fa0df2123f58affected
  • 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 to < d82a439c3cfdb28aa7e82e2e849c5c4dd9fca284affected
  • 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 to < a2a9339e1c9deb7e1e079e12e27a0265aea8421aaffected

Linux Linux

Default version status: affected

  • 3.5affected
  • 0 to < 3.5unaffected
  • 4.14.313 to ≤ 4.14.*unaffected
  • 4.19.281 to ≤ 4.19.*unaffected
  • 5.4.241 to ≤ 5.4.*unaffected
  • 5.10.178 to ≤ 5.10.*unaffected
  • 5.15.108 to ≤ 5.15.*unaffected
  • 6.1.25 to ≤ 6.1.*unaffected
  • 6.2.12 to ≤ 6.2.*unaffected
  • 6.3 to ≤ *unaffected

References