CVE-2023-53827

High

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} Similar to commit d0be8347c623 ("Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put"), just use l2cap_chan_hold_unless_zero to prevent referencing a channel that is about to be destroyed.

SeverityHigh
CVSS8.8
Exploit probability—
ProductLinux
PublishedDec 9, 2025
First seenDec 9, 2025

How to fix

Update
  • Linux Linuxf2d38e77aa5f3effc143e7dd24da8acf02925958, 1351551aa9058e07a20a27a158270cf84fcde621, c02421992505c95c7f3c9ad59ee35e22eac60988, d9ba36c22a7bb09d6bac4cc2f243eff05da53f43, ac6725a634f7e8c0330610a8527f20c730b61115, 348d446762e7c70778df8bafbdf3fa0df2123f58, d82a439c3cfdb28aa7e82e2e849c5c4dd9fca284, a2a9339e1c9deb7e1e079e12e27a0265aea8421a or later

Affected products

ProductAffected versionsFixed in
Linux Linux61d6ef3e3408cdf7e622646fb90a9f7f9560b943 ≤ v < f2d38e77aa5f3effc143e7dd24da8acf02925958, 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 ≤ v < 1351551aa9058e07a20a27a158270cf84fcde621, 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 ≤ v < c02421992505c95c7f3c9ad59ee35e22eac60988, 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 ≤ v < d9ba36c22a7bb09d6bac4cc2f243eff05da53f43, 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 ≤ v < ac6725a634f7e8c0330610a8527f20c730b61115, 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 ≤ v < 348d446762e7c70778df8bafbdf3fa0df2123f58, 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 ≤ v < d82a439c3cfdb28aa7e82e2e849c5c4dd9fca284, 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 ≤ v < a2a9339e1c9deb7e1e079e12e27a0265aea8421a, 3.5f2d38e77aa5f3effc143e7dd24da8acf02925958, 1351551aa9058e07a20a27a158270cf84fcde621, c02421992505c95c7f3c9ad59ee35e22eac60988, d9ba36c22a7bb09d6bac4cc2f243eff05da53f43, ac6725a634f7e8c0330610a8527f20c730b61115, 348d446762e7c70778df8bafbdf3fa0df2123f58, d82a439c3cfdb28aa7e82e2e849c5c4dd9fca284, a2a9339e1c9deb7e1e079e12e27a0265aea8421a

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2023-53827 · Linux · Dark Radar