CVE-2023-54164 — Use After Free in Linux
Severity
6.4MEDIUM
No vectorEPSS
0.0%
top 93.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 30
Description
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: ISO: fix iso_conn related locking and validity issues
sk->sk_state indicates whether iso_pi(sk)->conn is valid. Operations
that check/update sk_state and access conn should hold lock_sock,
otherwise they can race.
The order of taking locks is hci_dev_lock > lock_sock > iso_conn_lock,
which is how it is in connect/disconnect_cfm -> iso_conn_del ->
iso_chan_del.
Fix locking in iso_connect_cis/bis and sendmsg/recvmsg…
Affected Packages4 packages
▶CVEListV5linux/linuxc524f9561c657b8af26dd4f67092b8928261aa62 — e969bfed84c1f88dc722a678ee08488e86f0ec1a+4
🔴Vulnerability Details
3OSV▶
CVE-2023-54164: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix iso_conn related locking and validity issues sk->sk_state indi↗2025-12-30
GHSA▶
GHSA-7fc9-v6cv-523q: In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: ISO: fix iso_conn related locking and validity issues
sk->sk_state in↗2025-12-30