CVE-2023-53673

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the Bluetooth subsystem of the Linux kernel. In the hci cs disconnect() function, the system calls hci conn del() even if the disconnection process fails. Because ISO, L2CAP, and SCO connections refer to the hci conn without using hci conn get(), the disconn cfm callback must be executed to allow these connections to clean up their references. Failure to do so leads to a use-after-free condition, which can result in kernel NULL pointer dereferences or slab-use-after-free errors, potentially impacting the confidentiality, integrity, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.