In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: Fix potential use-after-free when clear keys
Similar to commit c5d2b6fa26b5 ("Bluetooth: Fix use-after-free in hciremoveltk/hciremoveirk"). We can not access k after kfree_rcu() call.
[
{
"deprecated": false,
"id": "CVE-2023-53386-00745db8",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@942d8cefb022f384d5424f8b90c7878f3f93726f",
"signature_version": "v1",
"target": {
"function": "hci_smp_ltks_clear",
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "10732093211983982586981320494890202097",
"length": 171.0
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-09749bf3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd",
"signature_version": "v1",
"target": {
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"319508282252210160201946875373387122119",
"257261397727147103243057534388675783851",
"73707221677649057579421591465560583282",
"33906551961445471724488027858596963127",
"325885844061071282232651137029526829189",
"285279129669367740535413310576342758939",
"324065507230413420992342497831244296814",
"242012028747806009077745044931141923999",
"253917708383514080904383571591753026470",
"319284248301901013117758932381924599020",
"109543566805526924869851334868849224337",
"98721107225643814740927468240497795369",
"253897539795616780461233897512689823540",
"261171755140049885583718766476130438133",
"259345445032796626249604947405058133609",
"60398855634313151329931814130867466854",
"23496641073020589049415860606404703398",
"173415699148604104931694723770947452312",
"205589560563189473063811707240888858679",
"308901598994411955478983202930613008132"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-14428f88",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd",
"signature_version": "v1",
"target": {
"function": "hci_link_keys_clear",
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "10454977830471188005543661026169838335",
"length": 166.0
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-17da82e1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35cc42f04bc49f0656f6840cb7451b3df6049649",
"signature_version": "v1",
"target": {
"function": "hci_smp_irks_clear",
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "72151001341864666918147312032236165475",
"length": 180.0
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-25a2a2f4",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35cc42f04bc49f0656f6840cb7451b3df6049649",
"signature_version": "v1",
"target": {
"function": "hci_link_keys_clear",
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "10454977830471188005543661026169838335",
"length": 166.0
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-46272c1c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@942d8cefb022f384d5424f8b90c7878f3f93726f",
"signature_version": "v1",
"target": {
"function": "hci_link_keys_clear",
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "10454977830471188005543661026169838335",
"length": 166.0
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-480c4c57",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3673952cf0c6cf81b06c66a0b788abeeb02ff3ae",
"signature_version": "v1",
"target": {
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"319508282252210160201946875373387122119",
"257261397727147103243057534388675783851",
"73707221677649057579421591465560583282",
"33906551961445471724488027858596963127",
"325885844061071282232651137029526829189",
"285279129669367740535413310576342758939",
"324065507230413420992342497831244296814",
"242012028747806009077745044931141923999",
"253917708383514080904383571591753026470",
"319284248301901013117758932381924599020",
"109543566805526924869851334868849224337",
"98721107225643814740927468240497795369",
"253897539795616780461233897512689823540",
"261171755140049885583718766476130438133",
"259345445032796626249604947405058133609",
"60398855634313151329931814130867466854",
"23496641073020589049415860606404703398",
"173415699148604104931694723770947452312",
"205589560563189473063811707240888858679",
"308901598994411955478983202930613008132"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-4a37c685",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3673952cf0c6cf81b06c66a0b788abeeb02ff3ae",
"signature_version": "v1",
"target": {
"function": "hci_blocked_keys_clear",
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "302478316003726920234230080882185355935",
"length": 169.0
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-52356bd4",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94617b736c25091b60e514e2e7aeafcbbee6b700",
"signature_version": "v1",
"target": {
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"319508282252210160201946875373387122119",
"257261397727147103243057534388675783851",
"73707221677649057579421591465560583282",
"33906551961445471724488027858596963127",
"325885844061071282232651137029526829189",
"285279129669367740535413310576342758939",
"324065507230413420992342497831244296814",
"242012028747806009077745044931141923999",
"253917708383514080904383571591753026470",
"319284248301901013117758932381924599020",
"109543566805526924869851334868849224337",
"98721107225643814740927468240497795369",
"253897539795616780461233897512689823540",
"261171755140049885583718766476130438133",
"259345445032796626249604947405058133609",
"60398855634313151329931814130867466854",
"23496641073020589049415860606404703398",
"173415699148604104931694723770947452312",
"205589560563189473063811707240888858679",
"308901598994411955478983202930613008132"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-56269e33",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da19f35868dfbecfff4f81166c054d2656cb1be4",
"signature_version": "v1",
"target": {
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"319508282252210160201946875373387122119",
"257261397727147103243057534388675783851",
"73707221677649057579421591465560583282",
"33906551961445471724488027858596963127",
"325885844061071282232651137029526829189",
"285279129669367740535413310576342758939",
"324065507230413420992342497831244296814",
"242012028747806009077745044931141923999",
"253917708383514080904383571591753026470",
"319284248301901013117758932381924599020",
"109543566805526924869851334868849224337",
"98721107225643814740927468240497795369",
"253897539795616780461233897512689823540",
"261171755140049885583718766476130438133",
"259345445032796626249604947405058133609",
"60398855634313151329931814130867466854",
"23496641073020589049415860606404703398",
"173415699148604104931694723770947452312",
"205589560563189473063811707240888858679",
"308901598994411955478983202930613008132"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-5df8628d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94617b736c25091b60e514e2e7aeafcbbee6b700",
"signature_version": "v1",
"target": {
"function": "hci_smp_ltks_clear",
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "10732093211983982586981320494890202097",
"length": 171.0
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-71552d93",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da19f35868dfbecfff4f81166c054d2656cb1be4",
"signature_version": "v1",
"target": {
"function": "hci_link_keys_clear",
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "10454977830471188005543661026169838335",
"length": 166.0
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-7bc53589",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3673952cf0c6cf81b06c66a0b788abeeb02ff3ae",
"signature_version": "v1",
"target": {
"function": "hci_smp_ltks_clear",
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "10732093211983982586981320494890202097",
"length": 171.0
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-915cb109",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3673952cf0c6cf81b06c66a0b788abeeb02ff3ae",
"signature_version": "v1",
"target": {
"function": "hci_link_keys_clear",
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "10454977830471188005543661026169838335",
"length": 166.0
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-970fb081",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94617b736c25091b60e514e2e7aeafcbbee6b700",
"signature_version": "v1",
"target": {
"function": "hci_smp_irks_clear",
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "72151001341864666918147312032236165475",
"length": 180.0
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-9e2ef080",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35cc42f04bc49f0656f6840cb7451b3df6049649",
"signature_version": "v1",
"target": {
"function": "hci_blocked_keys_clear",
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "302478316003726920234230080882185355935",
"length": 169.0
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-a017d8fa",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94617b736c25091b60e514e2e7aeafcbbee6b700",
"signature_version": "v1",
"target": {
"function": "hci_blocked_keys_clear",
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "302478316003726920234230080882185355935",
"length": 169.0
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-b1b00db9",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@942d8cefb022f384d5424f8b90c7878f3f93726f",
"signature_version": "v1",
"target": {
"function": "hci_blocked_keys_clear",
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "302478316003726920234230080882185355935",
"length": 169.0
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-b2b82b8e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35cc42f04bc49f0656f6840cb7451b3df6049649",
"signature_version": "v1",
"target": {
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"319508282252210160201946875373387122119",
"257261397727147103243057534388675783851",
"73707221677649057579421591465560583282",
"33906551961445471724488027858596963127",
"325885844061071282232651137029526829189",
"285279129669367740535413310576342758939",
"324065507230413420992342497831244296814",
"242012028747806009077745044931141923999",
"253917708383514080904383571591753026470",
"319284248301901013117758932381924599020",
"109543566805526924869851334868849224337",
"98721107225643814740927468240497795369",
"253897539795616780461233897512689823540",
"261171755140049885583718766476130438133",
"259345445032796626249604947405058133609",
"60398855634313151329931814130867466854",
"23496641073020589049415860606404703398",
"173415699148604104931694723770947452312",
"205589560563189473063811707240888858679",
"308901598994411955478983202930613008132"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-c5fc7e01",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da19f35868dfbecfff4f81166c054d2656cb1be4",
"signature_version": "v1",
"target": {
"function": "hci_smp_ltks_clear",
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "10732093211983982586981320494890202097",
"length": 171.0
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-d100502e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@942d8cefb022f384d5424f8b90c7878f3f93726f",
"signature_version": "v1",
"target": {
"function": "hci_smp_irks_clear",
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "72151001341864666918147312032236165475",
"length": 180.0
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-d1442f38",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35cc42f04bc49f0656f6840cb7451b3df6049649",
"signature_version": "v1",
"target": {
"function": "hci_smp_ltks_clear",
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "10732093211983982586981320494890202097",
"length": 171.0
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-decdb6ad",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd",
"signature_version": "v1",
"target": {
"function": "hci_smp_irks_clear",
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "72151001341864666918147312032236165475",
"length": 180.0
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-ea790cf8",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3673952cf0c6cf81b06c66a0b788abeeb02ff3ae",
"signature_version": "v1",
"target": {
"function": "hci_smp_irks_clear",
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "72151001341864666918147312032236165475",
"length": 180.0
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-efaac232",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd",
"signature_version": "v1",
"target": {
"function": "hci_blocked_keys_clear",
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "302478316003726920234230080882185355935",
"length": 169.0
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-f945cac3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd",
"signature_version": "v1",
"target": {
"function": "hci_smp_ltks_clear",
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "10732093211983982586981320494890202097",
"length": 171.0
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-f9a9bd1c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94617b736c25091b60e514e2e7aeafcbbee6b700",
"signature_version": "v1",
"target": {
"function": "hci_link_keys_clear",
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "10454977830471188005543661026169838335",
"length": 166.0
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-f9bc35d6",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@942d8cefb022f384d5424f8b90c7878f3f93726f",
"signature_version": "v1",
"target": {
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"319508282252210160201946875373387122119",
"257261397727147103243057534388675783851",
"73707221677649057579421591465560583282",
"33906551961445471724488027858596963127",
"325885844061071282232651137029526829189",
"285279129669367740535413310576342758939",
"324065507230413420992342497831244296814",
"242012028747806009077745044931141923999",
"253917708383514080904383571591753026470",
"319284248301901013117758932381924599020",
"109543566805526924869851334868849224337",
"98721107225643814740927468240497795369",
"253897539795616780461233897512689823540",
"261171755140049885583718766476130438133",
"259345445032796626249604947405058133609",
"60398855634313151329931814130867466854",
"23496641073020589049415860606404703398",
"173415699148604104931694723770947452312",
"205589560563189473063811707240888858679",
"308901598994411955478983202930613008132"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-fc099043",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da19f35868dfbecfff4f81166c054d2656cb1be4",
"signature_version": "v1",
"target": {
"function": "hci_blocked_keys_clear",
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "302478316003726920234230080882185355935",
"length": 169.0
}
},
{
"deprecated": false,
"id": "CVE-2023-53386-ff072670",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da19f35868dfbecfff4f81166c054d2656cb1be4",
"signature_version": "v1",
"target": {
"function": "hci_smp_irks_clear",
"file": "net/bluetooth/hci_core.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "72151001341864666918147312032236165475",
"length": 180.0
}
}
]