CVE-2023-53386: Bluetooth: Fix potential use-after-free when clear keys
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: Fix potential use-after-free when clear keys
Similar to commit c5d2b6fa26b5 ("Bluetooth: Fix use-after-free in hciremoveltk/hciremoveirk"). We can not access k after kfreercu() call.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53386?
CVE-2023-53386 has a high severity rating due to its potential for a use-after-free vulnerability in the Linux kernel's Bluetooth functionality.
How do I fix CVE-2023-53386?
To fix CVE-2023-53386, update your Linux kernel to the latest patched version which includes the security fix for this vulnerability.
What systems are affected by CVE-2023-53386?
CVE-2023-53386 affects various versions of the Linux kernel that incorporate the Bluetooth functionality.
What is the impact of CVE-2023-53386?
The impact of CVE-2023-53386 includes possible remote code execution or system crashes due to improper memory handling.
Is CVE-2023-53386 being actively exploited?
As of now, there have been no confirmed reports of active exploitation of CVE-2023-53386 in the wild.