NetSight
IP …
high7.8

CVE-2023-40283

An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10.

Impact

An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.5 before 4.14.322
from 4.15 before 4.19.291
from 4.20 before 5.4.253
from 5.5 before 5.10.190
from 5.11 before 5.15.126
from 5.16 before 6.1.45
DebianDebian Linux
Versions 10.0, 11.0, 12.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 20.04, 22.04

Weakness classification

CWE-416

References