An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled.
{
"cna_assigner": "mitre",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40283.json",
"unresolved_ranges": [
{
"extracted_events": [
{
"range": [
{
"fixed": "6.4.10"
}
],
"source": "DESCRIPTION"
}
]
}
]
}{
"extracted_events": [
{
"range": [
{
"fixed": "1728137b33c00d5a2b5110ed7aafb42e7c32e4a1"
}
],
"source": "REFERENCES_COMMIT"
}
]
}