CVE-2023-54197

Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work"

N/A

Published: December 30, 2025 at 12:09 PM UTC

Updated: October 28, 2026 at 07:10 PM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" This reverts commit 1e9ac114c4428fdb7ff4635b45d4f46017e8916f. This patch introduces a possible null-ptr-def problem. Revert it. And the fixed bug by this patch have resolved by commit 73f7b171b7c0 ("Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition").

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

90%

4.14.312 ≤ v < 4.14.3154.19.280 ≤ v < 4.19.2835.10.177 ≤ v < 5.10.1805.15.105 ≤ v < 5.15.1115.4.240 ≤ v < 5.4.2436.1.22 ≤ v < 6.1.286.2.9 ≤ v < 6.2.151e9ac114c4428fdb7ff4635b45d4f46017e8916f4.14.312 4.19.280 5.10.177 5.15.105 5.4.240 6.1.22 6.2.9 6.38efae2112d910d8e5166dd0a836791b08721eef195eacef5692545f199fae4e52abfbfa273acb351a18fb433ceb56e0787546a9d77056dd0f215e762af4d48754d5517d33bac5e504ff1f1de0808e29ec59c65a14e8f7d738429648833f3bb3f9df0513fcbf8deacb7053ce3e3fed64b277c6c6989e65bbada3d3fdfb4d523c5da30e35a8dd90e04f0fd8962

Vendor states this is fixed in 0837d10f6c37a47a0c73bccf1e39513613a2fcc2 (fixed)

Vendor states this is fixed in 3b4ed52009723f7dfca7a8ca95163bfb441bfb76 (fixed)

Vendor states this is fixed in 70a104588e3131415e559c06deb834ce259a285a (fixed)

Vendor states this is fixed in 8f83fa62614c282dd5d1211a0dd99c6a0a515b81 (fixed)

Vendor states this is fixed in 952030c914b5f2288609efe868537afcff7a3f51 (fixed)

Vendor states this is fixed in a789192f366147a0fbb395650079906d1d04e0b9 (fixed)

Vendor states this is fixed in d8d7ce037d9a8f1f0714ece268c4c2c50845bbc3 (fixed)

Vendor states this is fixed in db2bf510bd5d57f064d9e1db395ed86a08320c54 (fixed)

Vendor states this is fixed in de0ffb5145c9f418ad76f00e58d4b91c680410b2 (fixed)

Vendor states this is fixed in 4.14.315 (unaffected)

Vendor states this is fixed in 4.19.283 (unaffected)

Vendor states this is fixed in 5.10.180 (unaffected)