L2CAP Vulnerability in Linux Kernel Bluetooth Stack

CVE-2023-53297

What is CVE-2023-53297?

A vulnerability has been identified in the Linux kernel's Bluetooth subsystem concerning the L2CAP protocol. The issue arises due to an improper locking mechanism linked to the conn->chan_lock. Specifically, if the function l2cap_get_chan_by_scid returns NULL, it leads to a 'bad unlock balance' scenario. This abnormality could have implications for system stability and security, necessitating the application of relevant patches and updates to mitigate potential risks.

References