Null Pointer Dereference in Linux Kernel Bluetooth Implementation

CVE-2023-53293

What is CVE-2023-53293?

A vulnerability exists within the Linux kernel's Bluetooth subsystem, specifically in the handling of Realtek Bluetooth controllers. The function btrtl_set_quirks() fails to perform a necessary check for NULL pointers when accessing device structures. If a Realtek controller is connected without the appropriate driver, this oversight leads to a NULL dereference, potentially triggering a Kernel Oops. This flaw underscores the importance of robust error checking in driver implementations to ensure system stability.

References