CVE-2023-54214: Bluetooth: L2CAP: Fix potential user-after-free
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: Fix potential user-after-free
This fixes all instances of which requires to allocate a buffer calling allocskb which may release the chan lock and reacquire later which makes it possible that the chan is disconnected in the meantime.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-54214?
CVE-2023-54214 has a medium severity rating due to its potential exploitation leading to user-after-free vulnerabilities.
How do I fix CVE-2023-54214?
To fix CVE-2023-54214, users should apply the latest patches provided by their Linux distribution for the kernel.
Which systems are affected by CVE-2023-54214?
CVE-2023-54214 affects various versions of the Linux kernel that implement Bluetooth L2CAP features.
What are the potential impacts of CVE-2023-54214?
Exploitation of CVE-2023-54214 could lead to denial of service or potentially allow unauthorized memory access.
Is CVE-2023-54214 actively being exploited?
At this time, there are no known active exploits for CVE-2023-54214 reported in the wild.