-

CVE-2023-53374

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_conn: fail SCO/ISO via hci_conn_failed if ACL gone early

Not calling hci_(dis)connect_cfm before deleting conn referred to by a
socket generally results to use-after-free.

When cleaning up SCO connections when the parent ACL is deleted too
early, use hci_conn_failed to do the connection cleanup properly.

We also need to clean up ISO connections in a similar situation when
connecting has started but LE Create CIS is not yet sent, so do it too
here.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorLinux
≫
Product Linux
Default Statusunaffected
Version < 397d58007532644b35fad746da48c41161f32a57
Version ca1fd42e7dbfcb34890ffbf1f2f4b356776dab6f
Status affected
Version < e94b898463a62b72a2a8b75dea8936bf4db78e00
Version ca1fd42e7dbfcb34890ffbf1f2f4b356776dab6f
Status affected
Version < 3344d318337d9dca928fd448e966557ec5063f85
Version ca1fd42e7dbfcb34890ffbf1f2f4b356776dab6f
Status affected
Version 75e35bd4b7935ceed2aacd82f55940e73bf0b63b
Status affected
VendorLinux
≫
Product Linux
Default Statusaffected
Version 6.4
Status affected
Version < 6.4
Version 0
Status unaffected
Version <= 6.4.*
Version 6.4.16
Status unaffected
Version <= 6.5.*
Version 6.5.3
Status unaffected
Version <= *
Version 6.6
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.02% 0.042
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string