cbcvebase.
CVE-2023-51779
published 2024-02-29

CVE-2023-51779: bt_sock_recvmsg in net/bluetooth/af_bluetooth.c in the Linux kernel through 6.6.8 has a use-after-free because of a bt_sock_ioctl race condition.

PriorityP433high7CVSS 3.1
AVLACHPRLUINSUCHIHAH
EPSS
0.26%
17.8th percentile
bt_sock_recvmsg in net/bluetooth/af_bluetooth.c in the Linux kernel through 6.6.8 has a use-after-free because of a bt_sock_ioctl race condition.

Affected

13 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.69-1 (bookworm)linux 6.1.69-1 (bookworm)
linuxlinux_kernel>= 0 < 5.10.209-15.10.209-1
linuxlinux_kernel>= 0 < 6.1.69-16.1.69-1
linuxlinux_kernel>= 0 < 6.6.9-16.6.9-1
linuxlinux_kernel>= 0 < 6.6.9-16.6.9-1
linuxlinux_kernel>= 0 < 5.4.0-173.1915.4.0-173.191
linuxlinux_kernel>= 0 < 5.15.0-100.1105.15.0-100.110
linuxlinux_kernel>= 0 < 4.4.0-253.2874.4.0-253.287
linuxlinux_kernel>= 0 < 4.15.0-224.2364.15.0-224.236
msrcazl3_hyperv-daemons_6.6.22.1-2_on_azure_linux_3.0
msrcazl3_hyperv-daemons_6.6.29.1-1_on_azure_linux_3.0
msrcazure_linux_3.0_arm
msrcazure_linux_3.0_x64

CVSS provenance

nvdv3.17.0HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_ubuntu7.8HIGH
vendor_debian7.0HIGH
vendor_msrc7.0HIGH
vendor_redhat7.0HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.