CVE-2023-53297
Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
MEDIUM
5.5
CVSS Score
Published: September 16, 2025 at 08:11 AM UTC
Updated: August 4, 2026 at 04:06 PM UTC
1 product affected across 1 vendorLinux Kernel
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%
SSVC
No known exploit
Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp conn->chan_lock isn't acquired before l2cap_get_chan_by_scid, if l2cap_get_chan_by_scid returns NULL, then 'bad unlock balance' is triggered.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≥ 6.2.12v < 4.14.3164.14.313 ≤ v < 4.14.3164.15 ≤ v < 4.19.2844.19.281 ≤ v < 4.19.2844.20 ≤ v < 5.4.2445.10.178 ≤ v < 5.10.1815.11 ≤ v < 5.15.1135.15.108 ≤ v < 5.15.1135.16 ≤ v < 6.1.305.4.241 ≤ v < 5.4.2445.5 ≤ v < 5.10.1816.1.25 ≤ v < 6.1.306.2 ≤ v < 6.3.46.2.12 ≤ v < 6.36.3 ≤ v < 6.3.46.3 ≤ v < 6.41351551aa9058e07a20a27a158270cf84fcde621348d446762e7c70778df8bafbdf3fa0df2123f584.14.3134.19.2815.10.1785.15.1085.4.2416.1.256.2.126.3a2a9339e1c9deb7e1e079e12e27a0265aea8421aac6725a634f7e8c0330610a8527f20c730b61115c02421992505c95c7f3c9ad59ee35e22eac60988d82a439c3cfdb28aa7e82e2e849c5c4dd9fca284d9ba36c22a7bb09d6bac4cc2f243eff05da53f43f2d38e77aa5f3effc143e7dd24da8acf02925958
Vendor states this is fixed in 116b9c002c894097adc2b8684db2d1da4229ed46 (fixed)
Vendor states this is fixed in 2112c4c47d36bc5aba3ddeb9afedce6ae6a67e7d (fixed)
Vendor states this is fixed in 25e97f7b1866e6b8503be349eeea44bb52d661ce (fixed)
Vendor states this is fixed in 5134556c9be582793f30695c09d18a26fe1ff2d7 (fixed)
Vendor states this is fixed in 55410a9144c76ecda126e6cdec556dfcd8f343b2 (fixed)
Vendor states this is fixed in 5f352a56f0e607e6ff539cbf12156bfd8af232be (fixed)
Vendor states this is fixed in 6a27762340ad08643de3bc17fe1646ea489ca2e2 (fixed)
Vendor states this is fixed in fd269a0435f8e9943b7a57c5a59688848d42d449 (fixed)
Vendor states this is fixed in 4.14.316 (unaffected)
Vendor states this is fixed in 4.19.284 (unaffected)
Vendor states this is fixed in 5.10.181 (unaffected)
Vendor states this is fixed in 5.15.113 (unaffected)
Vendor states this is fixed in 5.4.244 (unaffected)
Vendor states this is fixed in 6.1.30 (unaffected)
Vendor states this is fixed in 6.3 (unaffected)
Vendor states this is fixed in 6.3.4 (unaffected)
Vendor states this is fixed in 6.4 (unaffected)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- https://git.kernel.org/stable/c/116b9c002c894097adc2b8684db2d1da4229ed46
- https://git.kernel.org/stable/c/2112c4c47d36bc5aba3ddeb9afedce6ae6a67e7d
- https://git.kernel.org/stable/c/25e97f7b1866e6b8503be349eeea44bb52d661ce
- https://git.kernel.org/stable/c/5134556c9be582793f30695c09d18a26fe1ff2d7
- https://git.kernel.org/stable/c/55410a9144c76ecda126e6cdec556dfcd8f343b2
References (8)
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/116b9c002c894097adc2b8684db2d1da4229ed46Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/2112c4c47d36bc5aba3ddeb9afedce6ae6a67e7dPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/25e97f7b1866e6b8503be349eeea44bb52d661cePatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/5134556c9be582793f30695c09d18a26fe1ff2d7Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/55410a9144c76ecda126e6cdec556dfcd8f343b2Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/5f352a56f0e607e6ff539cbf12156bfd8af232bePatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/6a27762340ad08643de3bc17fe1646ea489ca2e2Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/fd269a0435f8e9943b7a57c5a59688848d42d449SSVC — Action Prioritization
SSVCNo known exploitNot automatablePartial impact
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
5.5MEDIUMCISA-ADP
- Attack Vector
- LOCAL
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusMODIFIED
CWE
NVD-CWE-noinfo
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card