CVE-2023-53017
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2023-53017
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53017.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-53017
- Downstream
- Published
- 2025-03-27T16:43:45Z
- Modified
- 2025-10-15T04:56:06.119140Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- Bluetooth: hci_sync: fix memory leak in hci_update_adv_data()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hcisync: fix memory leak in hciupdateadvdata()
When hcicmdsyncqueue() failed in hciupdateadvdata(), instptr is not freed, which will cause memory leak, convert to use ERRPTR/PTR_ERR to pass the instance to callback so no memory needs to be allocated.
- References
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced651cd3d65b0f76a2198fcf3a80ce5d53dd267717Fixed8ac6043bd3e5b58d30f50737aedc2e58e8087ad5
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced651cd3d65b0f76a2198fcf3a80ce5d53dd267717Fixed1ed8b37cbaf14574c779064ef1372af62e8ba6aa
Affected versions
v6.*
v6.0
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.1.1
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.6
v6.1.7
v6.1.8
v6.2-rc1
v6.2-rc2
v6.2-rc3
Database specific
vanir_signatures
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1ed8b37cbaf14574c779064ef1372af62e8ba6aa",
"signature_version": "v1",
"target": {
"file": "net/bluetooth/hci_sync.c"
},
"digest": {
"line_hashes": [
"202815898202978762843469797874913659547",
"274501860284484592339610675188501189909",
"5408788565230365070124862574626839476",
"54005360570043603420821281906571351531",
"175558332070711879737369394027591613925",
"137330245161898565634799067524434583242",
"265963809771173924977317490701228863136",
"71055919660155820238773974863546857623",
"189372608088474868148125324485459466991",
"42853647185899406025794434133692194833",
"260071828040178813386721134618433818702",
"10249578624698504430307933272584216141"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2023-53017-1b9a7ec3"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1ed8b37cbaf14574c779064ef1372af62e8ba6aa",
"signature_version": "v1",
"target": {
"file": "net/bluetooth/hci_sync.c",
"function": "_update_adv_data_sync"
},
"digest": {
"length": 148.0,
"function_hash": "4127958160027686316590572849265613507"
},
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2023-53017-cdc0d7c6"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1ed8b37cbaf14574c779064ef1372af62e8ba6aa",
"signature_version": "v1",
"target": {
"file": "net/bluetooth/hci_sync.c",
"function": "hci_update_adv_data"
},
"digest": {
"length": 206.0,
"function_hash": "236654080121170311934838027079149596591"
},
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2023-53017-f506a633"
}
]