CVE-2023-53386

Bluetooth: Fix potential use-after-free when clear keys

State: Published
Severity: 7.8 High
Published: Sep 18, 2025
Updated: Aug 5, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: Fix potential use-after-free when clear keys

Similar to commit c5d2b6fa26b5 ("Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk"). We can not access k after kfree_rcu() call.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	d7d41682efc25d58b5bd8b80e85e3c9ce586635c to before e87da6a0ac6e631454e7da53a76aa9fe44aaa5ddAffected d7d41682efc25d58b5bd8b80e85e3c9ce586635c to before 942d8cefb022f384d5424f8b90c7878f3f93726fAffected d7d41682efc25d58b5bd8b80e85e3c9ce586635c to before 94617b736c25091b60e514e2e7aeafcbbee6b700Affected d7d41682efc25d58b5bd8b80e85e3c9ce586635c to before da19f35868dfbecfff4f81166c054d2656cb1be4Affected d7d41682efc25d58b5bd8b80e85e3c9ce586635c to before 35cc42f04bc49f0656f6840cb7451b3df6049649Affected d7d41682efc25d58b5bd8b80e85e3c9ce586635c to before 3673952cf0c6cf81b06c66a0b788abeeb02ff3aeAffected
LinuxLinux	5.7Affected before 5.7Not affected 5.10.195 through 5.10.Not affected 5.15.132 through 5.15.Not affected 6.1.53 through 6.1.Not affected 6.4.16 through 6.4.Not affected 6.5.3 through 6.5.*Not affected 6.6 and laterNot affected

Product

Versions

LinuxLinux

d7d41682efc25d58b5bd8b80e85e3c9ce586635c to before e87da6a0ac6e631454e7da53a76aa9fe44aaa5ddAffected
d7d41682efc25d58b5bd8b80e85e3c9ce586635c to before 942d8cefb022f384d5424f8b90c7878f3f93726fAffected
d7d41682efc25d58b5bd8b80e85e3c9ce586635c to before 94617b736c25091b60e514e2e7aeafcbbee6b700Affected
d7d41682efc25d58b5bd8b80e85e3c9ce586635c to before da19f35868dfbecfff4f81166c054d2656cb1be4Affected
d7d41682efc25d58b5bd8b80e85e3c9ce586635c to before 35cc42f04bc49f0656f6840cb7451b3df6049649Affected
d7d41682efc25d58b5bd8b80e85e3c9ce586635c to before 3673952cf0c6cf81b06c66a0b788abeeb02ff3aeAffected

LinuxLinux

5.7Affected
before 5.7Not affected
5.10.195 through 5.10.*Not affected
5.15.132 through 5.15.*Not affected
6.1.53 through 6.1.*Not affected
6.4.16 through 6.4.*Not affected
6.5.3 through 6.5.*Not affected
6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.