CVE-2023-1901: The bluetooth HCI host layer logic not clearing a global reference to a semaphore after synchronously sending HCI commands may allow a malicious HCI Controller…

PriorityP340high8CVSS 3.1

AVAACLPRLUINSUCHIHAH

EPSS

0.51%

39.8th percentile

The bluetooth HCI host layer logic not clearing a global reference to a semaphore after synchronously sending HCI commands may allow a malicious HCI Controller to cause the use of a dangling reference in the host layer, leading to a crash (DoS) or potential RCE on the Host layer.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
msrc	microsoft_edge	—	—
msrc	microsoft_edge_extended_stable	—	—
zephyrproject-rtos	zephyr	* – 3.3	—
zephyrproject	zephyr	<= 3.3.0	—

CVSS provenance

nvdv3.18.0HIGHCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

ghsa6.5MEDIUM

vendor_msrc8.8HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.