Skip to content
fr Sign in
7.0 High

CVE-2023-1989 A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel

Description

A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. A call to btsdio_remove with an unfinished job may cause a race problem which leads to a UAF on hdev devices.

Affected products and versions

Product Affected versions Fixed in
kernel Versions not published
hci_baseboard_management_controller Versions not published
linux_kernel 6.3 earliest → < 6.3+rc4 6.3+rc4
debian_linux 5.10.178-3 No fix stated
Red Hat Enterprise Linux 8 Versions not published
Red Hat Enterprise Linux 8.6 Extended Update Support Versions not published
Red Hat Enterprise Linux 8.8 Extended Update Support Versions not published
Red Hat Enterprise Linux 9 Versions not published
Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 Versions not published
Show the 2 other branches
Product Affected versions Fixed in
Red Hat Enterprise Linux 6 Versions not published
Red Hat Enterprise Linux 7 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of kernel

The 279 CVEs of kernel →
CVE-2024-1312 A use-after-free flaw was found in the Linux kernel's Memory Management subsystem when a user wins two races at the same… 5.1 Medium CVE-2023-6200 A race condition was found in the Linux Kernel 7.5 High CVE-2023-6560 An out-of-bounds memory access flaw was found in the io_uring SQ/CQ rings functionality in the Linux kernel 5.5 Medium CVE-2023-5972 A null pointer dereference flaw was found in the nft_inner.c functionality of netfilter in the Linux kernel 7.0 High
Track this CVE