logo_clicknbuy.png

CVE-2023-53145 – Qualcomm Bluetooth BTSdio Use After Free Buffer Overflow

The following table lists the changes that have been made to the
CVE-2023-53145 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    May. 10, 2025

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved:

    Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition

    In btsdio_probe, the data->work is bound with btsdio_work. It will be
    started in btsdio_send_frame.

    If the btsdio_remove runs with a unfinished work, there may be a race
    condition that hdev is freed but used in btsdio_work. Fix it by
    canceling the work before do cleanup in btsdio_remove.
    Added Reference https://git.kernel.org/stable/c/179c65828593aff1f444e15debd40a477cb23cf4
    Added Reference https://git.kernel.org/stable/c/3efcbf25e5ab4d4ad1b7e6ba0869ff85540e3f6e
    Added Reference https://git.kernel.org/stable/c/6c3653627397a0d6eab19b20a59423e118985a6b
    Added Reference https://git.kernel.org/stable/c/73f7b171b7c09139eb3c6a5677c200dc1be5f318
    Added Reference https://git.kernel.org/stable/c/746b363bef41cc159c051c47f9e30800bc6b520d
    Added Reference https://git.kernel.org/stable/c/a5c2a467e9e789ae0891de55b766daac52e3b7b3
    Added Reference https://git.kernel.org/stable/c/a6650d27ab2c12a8ee750f396edb5ac8b4558b2e
Share the Post:

Related Posts