CVE-2023-53828 in Kernel
Zusammenfassung (Englisch)
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor()
KSAN reports use-after-free in hci_add_adv_monitor().
While adding an adv monitor,
hci_add_adv_monitor() calls ->
msft_add_monitor_pattern() calls ->
msft_add_monitor_sync() calls ->
msft_le_monitor_advertisement_cb() calls in an error case ->
hci_free_adv_monitor() which frees the *moniter.
This is referenced by bt_dev_dbg() in hci_add_adv_monitor().
Fix the bt_dev_dbg() by using handle instead of monitor->handle.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Zuständig
Linux
Reservieren
09.12.2025
Veröffentlichung
09.12.2025
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 335015 | Linux Kernel Bluetooth hci_add_adv_monitor Pufferüberlauf | 416 | Nicht definiert | Offizieller Fix | CVE-2023-53828 |