CVE-2023-53297: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: fix "bad unlock balance" in l2capdisconnectrsp
conn->chanlock isn't acquired before l2capgetchanbyscid, if l2capgetchanbyscid returns NULL, then 'bad unlock balance' is triggered.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: fix "bad unlock balance" in l2capdisconnectrsp
conn-chanlock isn't acquired before l2capgetchanbyscid, if l2capgetchanbyscid returns NULL, then 'bad unlock balance' is triggered.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53297?
CVE-2023-53297 has a medium severity level due to a potential 'bad unlock balance' issue.
How do I fix CVE-2023-53297?
To fix CVE-2023-53297, update the Linux kernel to a patched version that resolves the Bluetooth L2CAP vulnerability.
What does CVE-2023-53297 affect?
CVE-2023-53297 affects the Bluetooth stack in the Linux kernel.
What is the impact of CVE-2023-53297?
The impact of CVE-2023-53297 could lead to unstable behavior in Bluetooth connections due to improper locking.
Is CVE-2023-53297 exploitable remotely?
CVE-2023-53297 is not considered remotely exploitable as it requires local access to the affected system.