CVE-2023-40283

CVSS v3.1 7.8 (High)

EPSS 0.04 % (5^th)

Affected Products 3

Advisories 38

NVD Status Analyzed

An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled.

Weaknesses

CWE-416: Use After Free

CVE Status: PUBLISHED
NVD Status: Analyzed
CNA: MITRE
Published Date: 2023-08-14 03:15:09
(13 months ago)
Updated Date: 2024-08-26 16:08:36
(3 weeks ago)

Affected Products

Configuration #1

	CPE23	From	Up To
Linux Kernel from 3.5 version and prior 4.14.322 version	cpe:2.3:o:linux:linux_kernel	>= 3.5	< 4.14.322
Linux Kernel from 4.15 version and prior 4.19.291 version	cpe:2.3:o:linux:linux_kernel	>= 4.15	< 4.19.291
Linux Kernel from 4.20 version and prior 5.4.253 version	cpe:2.3:o:linux:linux_kernel	>= 4.20	< 5.4.253
Linux Kernel from 5.5 version and prior 5.10.190 version	cpe:2.3:o:linux:linux_kernel	>= 5.5	< 5.10.190
Linux Kernel from 5.11 version and prior 5.15.126 version	cpe:2.3:o:linux:linux_kernel	>= 5.11	< 5.15.126
Linux Kernel from 5.16 version and prior 6.1.45 version	cpe:2.3:o:linux:linux_kernel	>= 5.16	< 6.1.45
Linux Kernel from 6.2 version and prior 6.4.10 version	cpe:2.3:o:linux:linux_kernel	>= 6.2	< 6.4.10

Configuration #2

		CPE23	From	Up To
	Debian Linux 10.0	cpe:2.3:o:debian:debian_linux:10.0
	Debian Linux 11.0	cpe:2.3:o:debian:debian_linux:11.0
	Debian Linux 12.0	cpe:2.3:o:debian:debian_linux:12.0

Configuration #3

		CPE23	From	Up To
	Canonical Ubuntu Linux 14.04	cpe:2.3:o:canonical:ubuntu_linux:14.04:::*:esm
	Canonical Ubuntu Linux 16.04	cpe:2.3:o:canonical:ubuntu_linux:16.04:::*:esm
	Canonical Ubuntu Linux 18.04	cpe:2.3:o:canonical:ubuntu_linux:18.04:::*:lts
	Canonical Ubuntu Linux 20.04	cpe:2.3:o:canonical:ubuntu_linux:20.04:::*:lts
	Canonical Ubuntu Linux 22.04	cpe:2.3:o:canonical:ubuntu_linux:22.04:::*:lts

Weaknesses

Affected Products

Canonical

Debian

Linux

Configuration #1

Configuration #2

Configuration #3