CVE-2023-53827Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp}
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} Similar to commit d0be8347c623 ("Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put"), just use l2cap_chan_hold_unless_zero to prevent referencing a channel that is about to be destroyed.
- CVSS
- 8.8 HIGH (v3.1, CNA)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 before f2d38e77aa5f3effc143e7dd24da8acf02925958; from 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 before 1351551aa9058e07a20a27a158270cf84fcde621; from 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 before c02421992505c95c7f3c9ad59ee35e22eac60988; from 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 before d9ba36c22a7bb09d6bac4cc2f243eff05da53f43; from 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 before ac6725a634f7e8c0330610a8527f20c730b61115; from 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 before 348d446762e7c70778df8bafbdf3fa0df2123f58; from 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 before d82a439c3cfdb28aa7e82e2e849c5c4dd9fca284; from 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 before a2a9339e1c9deb7e1e079e12e27a0265aea8421a | CNA record |
References
- https://git.kernel.org/stable/c/f2d38e77aa5f3effc143e7dd24da8acf02925958
- https://git.kernel.org/stable/c/1351551aa9058e07a20a27a158270cf84fcde621
- https://git.kernel.org/stable/c/c02421992505c95c7f3c9ad59ee35e22eac60988
- https://git.kernel.org/stable/c/d9ba36c22a7bb09d6bac4cc2f243eff05da53f43
- https://git.kernel.org/stable/c/ac6725a634f7e8c0330610a8527f20c730b61115
- https://git.kernel.org/stable/c/348d446762e7c70778df8bafbdf3fa0df2123f58
- https://git.kernel.org/stable/c/d82a439c3cfdb28aa7e82e2e849c5c4dd9fca284
- https://git.kernel.org/stable/c/a2a9339e1c9deb7e1e079e12e27a0265aea8421a
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.