DEBIAN-CVE-2023-53374
- Source
- https://security-tracker.debian.org/tracker/CVE-2023-53374
- Import Source
- https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53374.json
- JSON Data
- https://api.osv.dev/v1/vulns/DEBIAN-CVE-2023-53374
- Upstream
- Published
- 2025-09-18T14:15:40Z
- Modified
- 2025-09-25T03:46:48.252455Z
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: fail SCO/ISO via hciconnfailed if ACL gone early Not calling hci(dis)connectcfm before deleting conn referred to by a socket generally results to use-after-free. When cleaning up SCO connections when the parent ACL is deleted too early, use hciconn_failed to do the connection cleanup properly. We also need to clean up ISO connections in a similar situation when connecting has started but LE Create CIS is not yet sent, so do it too here.
- References
Affected packages
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:14 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source