Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-54214

Bluetooth: L2CAP: Fix potential user-after-free

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix potential user-after-free This fixes all instances of which requires to allocate a buffer calling alloc_skb which may release the chan lock and reacquire later which makes it possible that the chan is disconnected in the meantime.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a6a5568c03c4805d4d250f6bd9d468eeeb4ea059 to < b2fde8cb2a25125111f2144604e0e7c0ebcc4bbaaffected
  • a6a5568c03c4805d4d250f6bd9d468eeeb4ea059 to < a6a7d1541fefddf7ca0cfb34c1bff63ff809cc49affected
  • a6a5568c03c4805d4d250f6bd9d468eeeb4ea059 to < 60aaccf16d1e099c16bebfb96428ae762cb528f7affected
  • a6a5568c03c4805d4d250f6bd9d468eeeb4ea059 to < b8ed41cc04fb74005aa51d17865ca3d022760335affected
  • a6a5568c03c4805d4d250f6bd9d468eeeb4ea059 to < 31a288a4df7f6a28e65da22a4ab2add4a963738eaffected
  • a6a5568c03c4805d4d250f6bd9d468eeeb4ea059 to < 64e28ecf44e46de9f01915a4146706a21c3469d2affected
  • a6a5568c03c4805d4d250f6bd9d468eeeb4ea059 to < 994e3e18908f5c4a12d07b44018e6aa85f071048affected
  • a6a5568c03c4805d4d250f6bd9d468eeeb4ea059 to < df5703348813235874d851934e957c3723d71644affected

Linux Linux

Default version status: affected

  • 3.5affected
  • 0 to < 3.5unaffected
  • 4.14.308 to ≤ 4.14.*unaffected
  • 4.19.276 to ≤ 4.19.*unaffected
  • 5.4.235 to ≤ 5.4.*unaffected
  • 5.10.173 to ≤ 5.10.*unaffected
  • 5.15.99 to ≤ 5.15.*unaffected
  • 6.1.16 to ≤ 6.1.*unaffected
  • 6.2.3 to ≤ 6.2.*unaffected
  • 6.3 to ≤ *unaffected

References