CVE-2023-53145

Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition

State: Published
Severity: Not scored
Published: May 10, 2025
Updated: May 11, 2026
Reserved: May 2, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition

In btsdio_probe, the data->work is bound with btsdio_work. It will be started in btsdio_send_frame.

If the btsdio_remove runs with a unfinished work, there may be a race condition that hdev is freed but used in btsdio_work. Fix it by canceling the work before do cleanup in btsdio_remove.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ddbaf13e3609442b64abb931ac21527772d87980 to before 6c3653627397a0d6eab19b20a59423e118985a6bAffected ddbaf13e3609442b64abb931ac21527772d87980 to before 3efcbf25e5ab4d4ad1b7e6ba0869ff85540e3f6eAffected ddbaf13e3609442b64abb931ac21527772d87980 to before a6650d27ab2c12a8ee750f396edb5ac8b4558b2eAffected ddbaf13e3609442b64abb931ac21527772d87980 to before 746b363bef41cc159c051c47f9e30800bc6b520dAffected ddbaf13e3609442b64abb931ac21527772d87980 to before a5c2a467e9e789ae0891de55b766daac52e3b7b3Affected ddbaf13e3609442b64abb931ac21527772d87980 to before 179c65828593aff1f444e15debd40a477cb23cf4Affected ddbaf13e3609442b64abb931ac21527772d87980 to before 73f7b171b7c09139eb3c6a5677c200dc1be5f318Affected
LinuxLinux	2.6.24Affected before 2.6.24Not affected 4.14.326 through 4.14.Not affected 4.19.295 through 4.19.Not affected 5.4.257 through 5.4.Not affected 5.10.195 through 5.10.Not affected 5.15.131 through 5.15.Not affected 6.1.52 through 6.1.Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

ddbaf13e3609442b64abb931ac21527772d87980 to before 6c3653627397a0d6eab19b20a59423e118985a6bAffected
ddbaf13e3609442b64abb931ac21527772d87980 to before 3efcbf25e5ab4d4ad1b7e6ba0869ff85540e3f6eAffected
ddbaf13e3609442b64abb931ac21527772d87980 to before a6650d27ab2c12a8ee750f396edb5ac8b4558b2eAffected
ddbaf13e3609442b64abb931ac21527772d87980 to before 746b363bef41cc159c051c47f9e30800bc6b520dAffected
ddbaf13e3609442b64abb931ac21527772d87980 to before a5c2a467e9e789ae0891de55b766daac52e3b7b3Affected
ddbaf13e3609442b64abb931ac21527772d87980 to before 179c65828593aff1f444e15debd40a477cb23cf4Affected
ddbaf13e3609442b64abb931ac21527772d87980 to before 73f7b171b7c09139eb3c6a5677c200dc1be5f318Affected

LinuxLinux

2.6.24Affected
before 2.6.24Not affected
4.14.326 through 4.14.*Not affected
4.19.295 through 4.19.*Not affected
5.4.257 through 5.4.*Not affected
5.10.195 through 5.10.*Not affected
5.15.131 through 5.15.*Not affected
6.1.52 through 6.1.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.