An issue was discovered in l2capsockrelease in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled.
[
{
"events": [
{
"introduced": "3.5"
},
{
"fixed": "4.14.322"
}
]
},
{
"events": [
{
"introduced": "4.15"
},
{
"fixed": "4.19.291"
}
]
},
{
"events": [
{
"introduced": "4.20"
},
{
"fixed": "5.4.253"
}
]
},
{
"events": [
{
"introduced": "5.5"
},
{
"fixed": "5.10.190"
}
]
},
{
"events": [
{
"introduced": "5.11"
},
{
"fixed": "5.15.126"
}
]
},
{
"events": [
{
"introduced": "5.16"
},
{
"fixed": "6.1.45"
}
]
},
{
"events": [
{
"introduced": "6.2"
},
{
"fixed": "6.4.10"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "10.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "12.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.04"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "16.04"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "18.04"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "20.04"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "22.04"
}
]
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-40283.json"