CVE-2023-53386
published 2025-09-18CVE-2023-53386: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix potential use-after-free when clear keys Similar to commit c5d2b6fa26b5…
PriorityP338high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.14%
3.7th percentile
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: Fix potential use-after-free when clear keys
Similar to commit c5d2b6fa26b5 ("Bluetooth: Fix use-after-free in
hci_remove_ltk/hci_remove_irk"). We can not access k after kfree_rcu()
call.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.55-1 (bookworm) | linux 6.1.55-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= d7d41682efc25d58b5bd8b80e85e3c9ce586635c < e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd | e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd |
| linux | linux | >= d7d41682efc25d58b5bd8b80e85e3c9ce586635c < 942d8cefb022f384d5424f8b90c7878f3f93726f | 942d8cefb022f384d5424f8b90c7878f3f93726f |
| linux | linux | >= d7d41682efc25d58b5bd8b80e85e3c9ce586635c < 94617b736c25091b60e514e2e7aeafcbbee6b700 | 94617b736c25091b60e514e2e7aeafcbbee6b700 |
| linux | linux | >= d7d41682efc25d58b5bd8b80e85e3c9ce586635c < da19f35868dfbecfff4f81166c054d2656cb1be4 | da19f35868dfbecfff4f81166c054d2656cb1be4 |
| linux | linux | >= d7d41682efc25d58b5bd8b80e85e3c9ce586635c < 35cc42f04bc49f0656f6840cb7451b3df6049649 | 35cc42f04bc49f0656f6840cb7451b3df6049649 |
| linux | linux | >= d7d41682efc25d58b5bd8b80e85e3c9ce586635c < 3673952cf0c6cf81b06c66a0b788abeeb02ff3ae | 3673952cf0c6cf81b06c66a0b788abeeb02ff3ae |
| linux | linux_kernel | >= 0 < 5.10.197-1 | 5.10.197-1 |
| linux | linux_kernel | >= 0 < 6.1.55-1 | 6.1.55-1 |
| linux | linux_kernel | >= 0 < 6.5.3-1 | 6.5.3-1 |
| linux | linux_kernel | >= 0 < 6.5.3-1 | 6.5.3-1 |
| linux | linux_kernel | >= 5.11 < 5.15.132 | 5.15.132 |
| linux | linux_kernel | >= 5.16 < 6.1.53 | 6.1.53 |
| linux | linux_kernel | >= 5.7 < 5.10.195 | 5.10.195 |
| linux | linux_kernel | >= 6.2 < 6.4.16 | 6.4.16 |
| linux | linux_kernel | >= 6.5 < 6.5.3 | 6.5.3 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: Bluetooth: Fix potential use-after-free when clear keys
vendor_redhat·2025-09-18·CVSS 7.8
CVE-2023-53386 [HIGH] CWE-416 kernel: Bluetooth: Fix potential use-after-free when clear keys
kernel: Bluetooth: Fix potential use-after-free when clear keys
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: Fix potential use-after-free when clear keys
Similar to commit c5d2b6fa26b5 ("Bluetooth: Fix use-after-free in
hci_remove_ltk/hci_remove_irk"). We can not access k after kfree_rcu()
call.
Statement: A use-after-free bug was identified in the Bluetooth stack when clearing link and security keys. The code iterated with list_for_each_entry() and freed items with kfree_rcu(), allowing access to freed memory.
A local user with Bluetooth administration privileges (e.g. able to unpair devices, reset the adapter or manage stored keys) can reliably trigger this bug, causing use-after-free and likely DoS/kernel crash. And the confidential data leakage from
Debian
CVE-2023-53386: linux - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ...
vendor_debian·2023·CVSS 7.8
CVE-2023-53386 [HIGH] CVE-2023-53386: linux - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ...
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix potential use-after-free when clear keys Similar to commit c5d2b6fa26b5 ("Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk"). We can not access k after kfree_rcu() call.
Scope: local
bookworm: resolved (fixed in 6.1.55-1)
bullseye: resolved (fixed in 5.10.197-1)
forky: resolved (fixed in 6.5.3-1)
sid: resolved (fixed in 6.5.3-1)
trixie: resolved (fixed in 6.5.3-1)
OSV
CVE-2023-53386: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix potential use-after-free when clear keys Similar to commit c5d2b6fa
osv·2025-09-18·CVSS 7.8
CVE-2023-53386 [HIGH] CVE-2023-53386: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix potential use-after-free when clear keys Similar to commit c5d2b6fa
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix potential use-after-free when clear keys Similar to commit c5d2b6fa26b5 ("Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk"). We can not access k after kfree_rcu() call.
GHSA
GHSA-m38w-46xg-v336: In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: Fix potential use-after-free when clear keys
Similar to commit c5d2b6
ghsa_unreviewed·2025-09-18
CVE-2023-53386 [HIGH] CWE-416 GHSA-m38w-46xg-v336: In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: Fix potential use-after-free when clear keys
Similar to commit c5d2b6
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: Fix potential use-after-free when clear keys
Similar to commit c5d2b6fa26b5 ("Bluetooth: Fix use-after-free in
hci_remove_ltk/hci_remove_irk"). We can not access k after kfree_rcu()
call.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/35cc42f04bc49f0656f6840cb7451b3df6049649https://git.kernel.org/stable/c/3673952cf0c6cf81b06c66a0b788abeeb02ff3aehttps://git.kernel.org/stable/c/942d8cefb022f384d5424f8b90c7878f3f93726fhttps://git.kernel.org/stable/c/94617b736c25091b60e514e2e7aeafcbbee6b700https://git.kernel.org/stable/c/da19f35868dfbecfff4f81166c054d2656cb1be4https://git.kernel.org/stable/c/e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd
2025-09-18
Published