NetSight
IP …
high7.0

CVE-2023-1989

A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel.

Impact

A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. A call to btsdio_remove with an unfinished job may cause a race problem which leads to a UAF on hdev devices.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.24 before 4.14.312
from 4.15 before 4.19.280
from 4.20 before 5.4.240
from 5.5 before 5.10.177
from 5.11 before 5.15.105
from 5.16 before 6.1.22
NetappH300s
All versions
NetappH410c
All versions
NetappH410s
All versions
NetappH500s
All versions
NetappH700s
All versions
DebianDebian Linux
Versions 10.0, 12.0

Weakness classification

CWE-416

References