CVE-2023-54214
published 2025-12-30CVE-2023-54214: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix potential user-after-free This fixes all instances of which requires…
PriorityP344high8.8CVSS 3.1
AVAACLPRNUINSUCHIHAH
EPSS
0.30%
22.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: Fix potential user-after-free
This fixes all instances of which requires to allocate a buffer calling
alloc_skb which may release the chan lock and reacquire later which
makes it possible that the chan is disconnected in the meantime.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.20-1 (bookworm) | linux 6.1.20-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= a6a5568c03c4805d4d250f6bd9d468eeeb4ea059 < b2fde8cb2a25125111f2144604e0e7c0ebcc4bba | b2fde8cb2a25125111f2144604e0e7c0ebcc4bba |
| linux | linux | >= a6a5568c03c4805d4d250f6bd9d468eeeb4ea059 < a6a7d1541fefddf7ca0cfb34c1bff63ff809cc49 | a6a7d1541fefddf7ca0cfb34c1bff63ff809cc49 |
| linux | linux | >= a6a5568c03c4805d4d250f6bd9d468eeeb4ea059 < 60aaccf16d1e099c16bebfb96428ae762cb528f7 | 60aaccf16d1e099c16bebfb96428ae762cb528f7 |
| linux | linux | >= a6a5568c03c4805d4d250f6bd9d468eeeb4ea059 < b8ed41cc04fb74005aa51d17865ca3d022760335 | b8ed41cc04fb74005aa51d17865ca3d022760335 |
| linux | linux | >= a6a5568c03c4805d4d250f6bd9d468eeeb4ea059 < 31a288a4df7f6a28e65da22a4ab2add4a963738e | 31a288a4df7f6a28e65da22a4ab2add4a963738e |
| linux | linux | >= a6a5568c03c4805d4d250f6bd9d468eeeb4ea059 < 64e28ecf44e46de9f01915a4146706a21c3469d2 | 64e28ecf44e46de9f01915a4146706a21c3469d2 |
| linux | linux | >= a6a5568c03c4805d4d250f6bd9d468eeeb4ea059 < 994e3e18908f5c4a12d07b44018e6aa85f071048 | 994e3e18908f5c4a12d07b44018e6aa85f071048 |
| linux | linux | >= a6a5568c03c4805d4d250f6bd9d468eeeb4ea059 < df5703348813235874d851934e957c3723d71644 | df5703348813235874d851934e957c3723d71644 |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 3.5.0 < 4.14.308 | 4.14.308 |
| linux | linux_kernel | >= 4.15.0 < 4.19.276 | 4.19.276 |
| linux | linux_kernel | >= 4.20.0 < 5.4.235 | 5.4.235 |
| linux | linux_kernel | >= 5.11.0 < 5.15.99 | 5.15.99 |
| linux | linux_kernel | >= 5.16.0 < 6.1.16 | 6.1.16 |
| linux | linux_kernel | >= 5.5.0 < 5.10.173 | 5.10.173 |
| linux | linux_kernel | >= 6.2.0 < 6.2.3 | 6.2.3 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vendor_redhat5.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: Bluetooth: L2CAP: Fix potential user-after-free
vendor_redhat·2025-12-30·CVSS 5.8
CVE-2023-54214 [MEDIUM] CWE-416 kernel: Bluetooth: L2CAP: Fix potential user-after-free
kernel: Bluetooth: L2CAP: Fix potential user-after-free
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: Fix potential user-after-free
This fixes all instances of which requires to allocate a buffer calling
alloc_skb which may release the chan lock and reacquire later which
makes it possible that the chan is disconnected in the meantime.
A use-after-free flaw was identified in the Linux kernel’s Bluetooth L2CAP implementation. In certain conditions, when allocating a socket buffer via alloc_skb, the kernel may release and later reacquire the channel lock; if the channel is disconnected in the meantime, a subsequent reference to the freed buffer may occur, potentially resulting in a use-after-free condition.
Mitigation: Mitigation for this issue is ei
Debian
CVE-2023-54214: linux - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ...
vendor_debian·2023
CVE-2023-54214 CVE-2023-54214: linux - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ...
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix potential user-after-free This fixes all instances of which requires to allocate a buffer calling alloc_skb which may release the chan lock and reacquire later which makes it possible that the chan is disconnected in the meantime.
Scope: local
bookworm: resolved (fixed in 6.1.20-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.20-1)
sid: resolved (fixed in 6.1.20-1)
trixie: resolved (fixed in 6.1.20-1)
OSV
Bluetooth: L2CAP: Fix potential user-after-free
osv·2025-12-30
CVE-2023-54214 Bluetooth: L2CAP: Fix potential user-after-free
Bluetooth: L2CAP: Fix potential user-after-free
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: Fix potential user-after-free
This fixes all instances of which requires to allocate a buffer calling
alloc_skb which may release the chan lock and reacquire later which
makes it possible that the chan is disconnected in the meantime.
GHSA
GHSA-c5c6-fj3h-jwh2: In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: Fix potential user-after-free
This fixes all instances of whic
ghsa_unreviewed·2025-12-30
CVE-2023-54214 GHSA-c5c6-fj3h-jwh2: In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: Fix potential user-after-free
This fixes all instances of whic
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: Fix potential user-after-free
This fixes all instances of which requires to allocate a buffer calling
alloc_skb which may release the chan lock and reacquire later which
makes it possible that the chan is disconnected in the meantime.
OSV
CVE-2023-54214: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix potential user-after-free This fixes all instances of which
osv·2025-12-30
CVE-2023-54214 CVE-2023-54214: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix potential user-after-free This fixes all instances of which
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix potential user-after-free This fixes all instances of which requires to allocate a buffer calling alloc_skb which may release the chan lock and reacquire later which makes it possible that the chan is disconnected in the meantime.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2023-54214 kernel: Bluetooth: L2CAP: Fix potential user-after-free
bugzilla·2025-12-30
CVE-2023-54214 [MEDIUM] CVE-2023-54214 kernel: Bluetooth: L2CAP: Fix potential user-after-free
CVE-2023-54214 kernel: Bluetooth: L2CAP: Fix potential user-after-free
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: Fix potential user-after-free
This fixes all instances of which requires to allocate a buffer calling
alloc_skb which may release the chan lock and reacquire later which
makes it possible that the chan is disconnected in the meantime.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025123025-CVE-2023-54214-c4a6@gregkh/T
Wiz
CVE-2023-54214 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2023-54214 CVE-2023-54214 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2023-54214 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: Fix potential user-after-free
This fixes all instances of which requires to allocate a buffer calling
alloc_skb which may release the chan lock and reacquire later which
makes it possible that the chan is disconnected in the meantime.
Source : NVD
Published December 30, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 10.8
Exploitation Probability (EPSS) N/A
Affected packages and libraries
kernel-macros
kernel-64k-debug-modules-extra
Sources
NVD
Debian 11, 12, 1
https://git.kernel.org/stable/c/31a288a4df7f6a28e65da22a4ab2add4a963738ehttps://git.kernel.org/stable/c/60aaccf16d1e099c16bebfb96428ae762cb528f7https://git.kernel.org/stable/c/64e28ecf44e46de9f01915a4146706a21c3469d2https://git.kernel.org/stable/c/994e3e18908f5c4a12d07b44018e6aa85f071048https://git.kernel.org/stable/c/a6a7d1541fefddf7ca0cfb34c1bff63ff809cc49https://git.kernel.org/stable/c/b2fde8cb2a25125111f2144604e0e7c0ebcc4bbahttps://git.kernel.org/stable/c/b8ed41cc04fb74005aa51d17865ca3d022760335https://git.kernel.org/stable/c/df5703348813235874d851934e957c3723d71644
2025-12-30
Published