CVE-2023-53374
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-09-18

Last updated on: 2025-12-12

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: fail SCO/ISO via hci_conn_failed if ACL gone early Not calling hci_(dis)connect_cfm before deleting conn referred to by a socket generally results to use-after-free. When cleaning up SCO connections when the parent ACL is deleted too early, use hci_conn_failed to do the connection cleanup properly. We also need to clean up ISO connections in a similar situation when connecting has started but LE Create CIS is not yet sent, so do it too here.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-18
Last Modified
2025-12-12
Generated
2026-06-16
AI Q&A
2025-09-18
EPSS Evaluated
2026-06-14
NVD
CVE-2023-53374
Affected Vendors & Products
Showing 8 associated CPEs
Vendor Product Version / Range
linux linux_kernel From 6.3.8 (inc) to 6.4 (exc)
linux linux_kernel From 6.4.1 (inc) to 6.4.16 (exc)
linux linux_kernel From 6.5 (inc) to 6.5.3 (exc)
linux linux_kernel 6.4
linux linux_kernel 6.4
linux linux_kernel 6.4
linux linux_kernel 6.4
linux linux_kernel 6.4
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-416 The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel's Bluetooth subsystem involves improper handling of SCO and ISO connections when the parent ACL connection is deleted prematurely. Specifically, failing to call certain confirmation functions before deleting a connection referenced by a socket can lead to a use-after-free condition. The fix involves using hci_conn_failed to properly clean up these connections to prevent this issue.

Impact Analysis

The vulnerability can lead to use-after-free conditions in the Bluetooth connection handling code, which may cause system instability, crashes, or potentially allow an attacker to execute arbitrary code or cause denial of service on affected systems.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2023-53374. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart