CVE-2023-53762 — Expired Pointer Dereference in Linux
Severity
7.0HIGH
No vectorEPSS
0.0%
top 90.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 8
Description
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync
Use-after-free can occur in hci_disconnect_all_sync if a connection is
deleted by concurrent processing of a controller event.
To prevent this the code now tries to iterate over the list backwards
to ensure the links are cleanup before its parents, also it no longer
relies on a cursor, instead it always uses the last element since
hci_abort_conn_sync is guaranteed to cal…
Affected Packages4 packages
▶CVEListV5linux/linux182ee45da083db4e3e621541ccf255bfa9652214 — a30c074f0b5b7f909a15c978fbc96a29e2f94e42+3
🔴Vulnerability Details
3GHSA▶
GHSA-v6x6-vgmm-x298: In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync
Use-after-free can occur↗2025-12-08
OSV▶
CVE-2023-53762: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync Use-after-free can occur i↗2025-12-08