Use-After-Free Vulnerability in Linux Kernel Bluetooth for Products by Vendor

CVE-2023-53762

What is CVE-2023-53762?

A vulnerability has been identified in the Linux kernel's Bluetooth subsystem. The issue arises in the 'hci_disconnect_all_sync' function where a use-after-free condition may occur if a connection is deleted while another process concurrently processes a controller event. To mitigate this vulnerability, the code has been updated to iterate backwards through the connection list, ensuring that links are properly cleaned up before their parent references are removed. This prevents potential crashes and maintains Bluetooth connection stability.

References