Bluetooth Stack Issue in Linux Kernel Affecting Connectivity and Performance

CVE-2023-53673

What is CVE-2023-53673?

A vulnerability in the Bluetooth stack of the Linux kernel has been identified, where a disconnect callback may not be properly invoked before a connection is deleted. This issue arises from a flawed handling of connection references during disconnection, which can lead to situations where ISO, L2CAP, and SCO connections continue to reference a connection that has already been deleted. If the cleanup process does not occur correctly, it can result in a use-after-free condition, potentially compromising system stability and causing unexpected crashes. It is essential for users to update to the latest version of the Linux kernel where this vulnerability has been addressed.

References