← CVE Intelligence

CVE-2023-1989

Kernel: use after free bug in btsdio_remove due to race condition PUBLISHED

Description (CNA)

A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. A call to btsdio_remove with an unfinished job may cause a race problem which leads to a UAF on hdev devices.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedaffected 2.6.24 before 4.14.326; affected 4.15 before 4.19.295; affected 4.20 before 5.4.257; affected 5.5 before 5.10.195; affected 5.11 before 5.15.131; affected 5.16 before 6.1.52; affected 6.2 before 6.3
Red Hat / Red Hat Enterprise Linux 8unaffected 0:4.18.0-513.5.1.rt7.307.el8_9 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:4.18.0-513.5.1.el8_9 before *
Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Supportunaffected 0:4.18.0-372.91.1.el8_6 before *
Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Supportunaffected 0:4.18.0-477.64.1.el8_8 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:5.14.0-362.8.1.el9_3 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:5.14.0-362.8.1.el9_3 before *
Red Hat / Red Hat Virtualization 4 for Red Hat Enterprise Linux 8unaffected 0:4.18.0-372.91.1.el8_6 before *
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 7unknown
Red Hat / Red Hat Enterprise Linux 7unknown
Red Hat / Red Hat Enterprise Linux 9affected

CWE

CWE-416

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.