CVE-2023-53305

Bluetooth: L2CAP: Fix use-after-free

State: Published
Severity: 8.8 High
Published: Sep 16, 2025
Updated: Aug 5, 2026
Reserved: Sep 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: L2CAP: Fix use-after-free

Fix potential use-after-free in l2cap_le_command_rej.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	71fb419724fadab4efdf98210aa3fe053bd81d29 to before e76bab1b7afa580cd76362540fc37551ada4359bAffected 71fb419724fadab4efdf98210aa3fe053bd81d29 to before 1a40c56e8bff3e424724d78a9a6b3272dd8a371dAffected 71fb419724fadab4efdf98210aa3fe053bd81d29 to before fe49aa73cca6608714477b74bfc6874b9db979dfAffected 71fb419724fadab4efdf98210aa3fe053bd81d29 to before 2958cf9f805b9f0bdc4a761bf6ea281eb8d44f8eAffected 71fb419724fadab4efdf98210aa3fe053bd81d29 to before 548a6b64b3c0688f01119a6fcccceb41f8c984e4Affected 71fb419724fadab4efdf98210aa3fe053bd81d29 to before 149daab45922ab1ac7f0cbeacab7251a46bf5e63Affected 71fb419724fadab4efdf98210aa3fe053bd81d29 to before 255be68150291440657b2cdb09420b69441af3d8Affected 71fb419724fadab4efdf98210aa3fe053bd81d29 to before f752a0b334bb95fe9b42ecb511e0864e2768046fAffected
LinuxLinux	3.14Affected before 3.14Not affected 4.14.324 through 4.14.Not affected 4.19.293 through 4.19.Not affected 5.4.255 through 5.4.Not affected 5.10.192 through 5.10.Not affected 5.15.128 through 5.15.Not affected 6.1.47 through 6.1.Not affected 6.4.12 through 6.4.*Not affected 6.5 and laterNot affected

Product

Versions

LinuxLinux

71fb419724fadab4efdf98210aa3fe053bd81d29 to before e76bab1b7afa580cd76362540fc37551ada4359bAffected
71fb419724fadab4efdf98210aa3fe053bd81d29 to before 1a40c56e8bff3e424724d78a9a6b3272dd8a371dAffected
71fb419724fadab4efdf98210aa3fe053bd81d29 to before fe49aa73cca6608714477b74bfc6874b9db979dfAffected
71fb419724fadab4efdf98210aa3fe053bd81d29 to before 2958cf9f805b9f0bdc4a761bf6ea281eb8d44f8eAffected
71fb419724fadab4efdf98210aa3fe053bd81d29 to before 548a6b64b3c0688f01119a6fcccceb41f8c984e4Affected
71fb419724fadab4efdf98210aa3fe053bd81d29 to before 149daab45922ab1ac7f0cbeacab7251a46bf5e63Affected
71fb419724fadab4efdf98210aa3fe053bd81d29 to before 255be68150291440657b2cdb09420b69441af3d8Affected
71fb419724fadab4efdf98210aa3fe053bd81d29 to before f752a0b334bb95fe9b42ecb511e0864e2768046fAffected

LinuxLinux

3.14Affected
before 3.14Not affected
4.14.324 through 4.14.*Not affected
4.19.293 through 4.19.*Not affected
5.4.255 through 5.4.*Not affected
5.10.192 through 5.10.*Not affected
5.15.128 through 5.15.*Not affected
6.1.47 through 6.1.*Not affected
6.4.12 through 6.4.*Not affected
6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.