CVE-2023-53520

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's Bluetooth implementation where a race condition can occur during device suspension. Specifically, if hci unregister dev() frees the hci dev object while hci suspend notifier is still accessing it, a crash can result. The call trace indicates the issue occurs within the hci suspend sync function and related Bluetooth modules. The patch addresses this by maintaining a reference count on the hci dev object during processing in hci suspend notifier to prevent the race condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.