Bluetooth: Fix potential use-after-free when clear keys
CVE-2023-53386

Currently unrated

Key Information:

Vendor

Linux
Status
Linux
Vendor
CVE Published:
18 September 2025

What is CVE-2023-53386?

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: Fix potential use-after-free when clear keys

Similar to commit c5d2b6fa26b5 ("Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk"). We can not access k after kfree_rcu() call.

Affected Version(s)

Linux d7d41682efc25d58b5bd8b80e85e3c9ce586635c

Linux d7d41682efc25d58b5bd8b80e85e3c9ce586635c < 942d8cefb022f384d5424f8b90c7878f3f93726f

Linux d7d41682efc25d58b5bd8b80e85e3c9ce586635c < 94617b736c25091b60e514e2e7aeafcbbee6b700

References

https://git.kernel.org/stable/c/e87da6a0ac6e631454e7da53a...
https://git.kernel.org/stable/c/942d8cefb022f384d5424f8b9...
https://git.kernel.org/stable/c/94617b736c25091b60e514e2e...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-53386 : Linux Kernel Bluetooth Vulnerability: Potential Use-After-Free Issue in Key Handling