CVE-2023-53762

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-rc1+ #10

Description A use-after-free condition can occur in the Bluetooth stack within the Linux kernel, specifically in the hci disconnect all sync function. This issue arises when a connection is deleted during concurrent processing of a controller event. The code has been updated to iterate over the connection list backwards to ensure proper cleanup and to avoid relying on a cursor, instead utilizing the last element as hci abort conn sync is guaranteed to call hci conn del. A crash log indicates the issue occurs in hci set powered sync.

Recommendations Update to a version newer than 6.5.0-rc1+ #10.