CVE-2023-53297

Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp

State: Published
Severity: 8.8 High
Published: Sep 16, 2025
Updated: Aug 5, 2026
Reserved: Sep 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp

conn->chan_lock isn't acquired before l2cap_get_chan_by_scid, if l2cap_get_chan_by_scid returns NULL, then 'bad unlock balance' is triggered.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	f2d38e77aa5f3effc143e7dd24da8acf02925958 to before 5f352a56f0e607e6ff539cbf12156bfd8af232beAffected 1351551aa9058e07a20a27a158270cf84fcde621 to before 6a27762340ad08643de3bc17fe1646ea489ca2e2Affected c02421992505c95c7f3c9ad59ee35e22eac60988 to before 2112c4c47d36bc5aba3ddeb9afedce6ae6a67e7dAffected d9ba36c22a7bb09d6bac4cc2f243eff05da53f43 to before 55410a9144c76ecda126e6cdec556dfcd8f343b2Affected ac6725a634f7e8c0330610a8527f20c730b61115 to before 116b9c002c894097adc2b8684db2d1da4229ed46Affected 348d446762e7c70778df8bafbdf3fa0df2123f58 to before fd269a0435f8e9943b7a57c5a59688848d42d449Affected a2a9339e1c9deb7e1e079e12e27a0265aea8421a to before 5134556c9be582793f30695c09d18a26fe1ff2d7Affected a2a9339e1c9deb7e1e079e12e27a0265aea8421a to before 25e97f7b1866e6b8503be349eeea44bb52d661ceAffected d82a439c3cfdb28aa7e82e2e849c5c4dd9fca284Affected 4.14.313 to before 4.14.316Affected 4.19.281 to before 4.19.284Affected 5.4.241 to before 5.4.244Affected 5.10.178 to before 5.10.181Affected 5.15.108 to before 5.15.113Affected 6.1.25 to before 6.1.30Affected 6.2.12 to before 6.3Affected
LinuxLinux	6.3Affected before 6.3Not affected 4.14.316 through 4.14.Not affected 4.19.284 through 4.19.Not affected 5.4.244 through 5.4.Not affected 5.10.181 through 5.10.Not affected 5.15.113 through 5.15.Not affected 6.1.30 through 6.1.Not affected 6.3.4 through 6.3.*Not affected 6.4 and laterNot affected

Product

Versions

LinuxLinux

f2d38e77aa5f3effc143e7dd24da8acf02925958 to before 5f352a56f0e607e6ff539cbf12156bfd8af232beAffected
1351551aa9058e07a20a27a158270cf84fcde621 to before 6a27762340ad08643de3bc17fe1646ea489ca2e2Affected
c02421992505c95c7f3c9ad59ee35e22eac60988 to before 2112c4c47d36bc5aba3ddeb9afedce6ae6a67e7dAffected
d9ba36c22a7bb09d6bac4cc2f243eff05da53f43 to before 55410a9144c76ecda126e6cdec556dfcd8f343b2Affected
ac6725a634f7e8c0330610a8527f20c730b61115 to before 116b9c002c894097adc2b8684db2d1da4229ed46Affected
348d446762e7c70778df8bafbdf3fa0df2123f58 to before fd269a0435f8e9943b7a57c5a59688848d42d449Affected
a2a9339e1c9deb7e1e079e12e27a0265aea8421a to before 5134556c9be582793f30695c09d18a26fe1ff2d7Affected
a2a9339e1c9deb7e1e079e12e27a0265aea8421a to before 25e97f7b1866e6b8503be349eeea44bb52d661ceAffected
d82a439c3cfdb28aa7e82e2e849c5c4dd9fca284Affected
4.14.313 to before 4.14.316Affected
4.19.281 to before 4.19.284Affected
5.4.241 to before 5.4.244Affected
5.10.178 to before 5.10.181Affected
5.15.108 to before 5.15.113Affected
6.1.25 to before 6.1.30Affected
6.2.12 to before 6.3Affected

LinuxLinux

6.3Affected
before 6.3Not affected
4.14.316 through 4.14.*Not affected
4.19.284 through 4.19.*Not affected
5.4.244 through 5.4.*Not affected
5.10.181 through 5.10.*Not affected
5.15.113 through 5.15.*Not affected
6.1.30 through 6.1.*Not affected
6.3.4 through 6.3.*Not affected
6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.