CVE-2023-53018

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_conn: Fix memory leaks

When hci_cmd_sync_queue() failed in hci_le_terminate_big() or hci_le_big_terminate(), the memory pointed by variable d is not freed, which will cause memory leak. Add release process to error path.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= eca0ae4aea66914515e5e3098ea051b518ee5316, < f51a825b9f730a782aa768454906b4468e67b667; >= eca0ae4aea66914515e5e3098ea051b518ee5316, < 3aa21311f36d8a2730c7ccef37235e951f23927b
LinuxLinux6.0

References

Timeline

Published
Mar 27, 2025
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-530197.8In the Linux kernel, the following vulnerability has been resolved: net: mdio: validate parameter addr in mdiobus_get_phy() The caller mayCVE-2023-53025.4A vulnerability, which was classified as problematic, has been found in SourceCodester Best Courier Management System 1.0. This issue affectCVE-2023-530204.7In the Linux kernel, the following vulnerability has been resolved: l2tp: close all race conditions in l2tp_tunnel_register() The code in CVE-2023-530217.8In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_taprio: fix possible use-after-free syzbot reported a nCVE-2023-530225.5In the Linux kernel, the following vulnerability has been resolved: net: enetc: avoid deadlock in enetc_tx_onestep_tstamp() This lockdep sCVE-2023-530237.8In the Linux kernel, the following vulnerability has been resolved: net: nfc: Fix use-after-free in local_cleanup() Fix a use-after-free tCVE-2023-530247.1In the Linux kernel, the following vulnerability has been resolved: bpf: Fix pointer-leak due to insufficient speculative store bypass mitiCVE-2023-530265.5In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix ib block iterator counter overflow When registering a nCVE-2023-530285.5In the Linux kernel, the following vulnerability has been resolved: Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()" This reCVE-2023-530295.5In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt The coCVE-2023-53036.1A vulnerability, which was classified as problematic, was found in Online Banquet Booking System 1.0. Affected is an unknown function of theCVE-2023-530305.5In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Avoid use of GFP_KERNEL in atomic context Using GFP_KERN
CVE-2023-53018: Medium severity, CVSS 5.5 | Vulnix