Linux Kernel Bluetooth Vulnerability in HCI Connection Management

CVE-2023-53374

What is CVE-2023-53374?

This vulnerability in the Linux kernel affects the Bluetooth subsystem, specifically in the handling of HCI connections. A use-after-free issue occurs when the cleanup of SCO connections is improperly managed due to early deletion of the parent ACL connection. This failure can lead to significant security risks when attempting to clean up ISO connections, particularly if the LE Create CIS command hasn't been initiated. To mitigate this vulnerability, it's crucial to implement a proper connection cleanup routine using the hci_conn_failed function for both SCO and ISO connections.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References