vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2023-54214

Bluetooth: L2CAP: Fix potential user-after-free

HIGH
8.8
CVSS Score
Published: December 30, 2025 at 12:11 PM UTC
Updated: October 28, 2026 at 07:10 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH8.8
Exploit prediction
EPSS 0.3%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix potential user-after-free This fixes all instances of which requires to allocate a buffer calling alloc_skb which may release the chan lock and reacquire later which makes it possible that the chan is disconnected in the meantime.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
3.5a6a5568c03c4805d4d250f6bd9d468eeeb4ea059
Vendor states this is fixed in 31a288a4df7f6a28e65da22a4ab2add4a963738e (fixed)
Vendor states this is fixed in 60aaccf16d1e099c16bebfb96428ae762cb528f7 (fixed)
Vendor states this is fixed in 64e28ecf44e46de9f01915a4146706a21c3469d2 (fixed)
Vendor states this is fixed in 994e3e18908f5c4a12d07b44018e6aa85f071048 (fixed)
Vendor states this is fixed in a6a7d1541fefddf7ca0cfb34c1bff63ff809cc49 (fixed)
Vendor states this is fixed in b2fde8cb2a25125111f2144604e0e7c0ebcc4bba (fixed)
Vendor states this is fixed in b8ed41cc04fb74005aa51d17865ca3d022760335 (fixed)
Vendor states this is fixed in df5703348813235874d851934e957c3723d71644 (fixed)
Vendor states this is fixed in 3.5 (unaffected)
Vendor states this is fixed in 4.14.308 (unaffected)
Vendor states this is fixed in 4.19.276 (unaffected)
Vendor states this is fixed in 5.10.173 (unaffected)
Vendor states this is fixed in 5.15.99 (unaffected)
Vendor states this is fixed in 5.4.235 (unaffected)
Vendor states this is fixed in 6.1.16 (unaffected)
Vendor states this is fixed in 6.2.3 (unaffected)
Vendor states this is fixed in 6.3 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/b2fde8cb2a25125111f2144604e0e7c0ebcc4bba
Source: cverecord
https://git.kernel.org/stable/c/a6a7d1541fefddf7ca0cfb34c1bff63ff809cc49
Source: cverecord
https://git.kernel.org/stable/c/60aaccf16d1e099c16bebfb96428ae762cb528f7
Source: cverecord
https://git.kernel.org/stable/c/b8ed41cc04fb74005aa51d17865ca3d022760335
Source: cverecord
https://git.kernel.org/stable/c/31a288a4df7f6a28e65da22a4ab2add4a963738e
Source: cverecord
https://git.kernel.org/stable/c/64e28ecf44e46de9f01915a4146706a21c3469d2
Source: cverecord
https://git.kernel.org/stable/c/994e3e18908f5c4a12d07b44018e6aa85f071048
Source: cverecord
https://git.kernel.org/stable/c/df5703348813235874d851934e957c3723d71644

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

8.8HIGHLinux
Vector?

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card