CVE-2023-53297

MediumCVSS 5.5/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp

conn->chan_lock isn't acquired before l2cap_get_chan_by_scid, if l2cap_get_chan_by_scid returns NULL, then 'bad unlock balance' is triggered.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= f2d38e77aa5f3effc143e7dd24da8acf02925958, < 5f352a56f0e607e6ff539cbf12156bfd8af232be; >= 1351551aa9058e07a20a27a158270cf84fcde621, < 6a27762340ad08643de3bc17fe1646ea489ca2e2; >= c02421992505c95c7f3c9ad59ee35e22eac60988, < 2112c4c47d36bc5aba3ddeb9afedce6ae6a67e7d; >= d9ba36c22a7bb09d6bac4cc2f243eff05da53f43, < 55410a9144c76ecda126e6cdec556dfcd8f343b2; >= ac6725a634f7e8c0330610a8527f20c730b61115, < 116b9c002c894097adc2b8684db2d1da4229ed46; >= 348d446762e7c70778df8bafbdf3fa0df2123f58, < fd269a0435f8e9943b7a57c5a59688848d42d449; >= a2a9339e1c9deb7e1e079e12e27a0265aea8421a, < 5134556c9be582793f30695c09d18a26fe1ff2d7; >= a2a9339e1c9deb7e1e079e12e27a0265aea8421a, < 25e97f7b1866e6b8503be349eeea44bb52d661ce; d82a439c3cfdb28aa7e82e2e849c5c4dd9fca284; >= 4.14.313, < 4.14.316; >= 4.19.281, < 4.19.284; >= 5.4.241, < 5.4.244; >= 5.10.178, < 5.10.181; >= 5.15.108, < 5.15.113; >= 6.1.25, < 6.1.30; >= 6.2.12, < 6.3
LinuxLinux6.3

References

Timeline

Published
Sep 16, 2025
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-532985.5In the Linux kernel, the following vulnerability has been resolved: nfc: fix memory leak of se_io context in nfc_genl_se_io The callback cCVE-2023-532995.5In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix leak of 'r10bio->remaining' for recovery raid10_sync_reCVE-2023-53307.5Mattermost fails to enforce a limit for the size of the cache entry for OpenGraph data allowing an attacker to send a specially crafted reqCVE-2023-533005.5In the Linux kernel, the following vulnerability has been resolved: media: hi846: Fix memleak in hi846_init_controls() hi846_init_controlsCVE-2023-533017.1In the Linux kernel, the following vulnerability has been resolved: f2fs: fix kernel crash due to null io->bio We should return when io->bCVE-2023-533025.5In the Linux kernel, the following vulnerability has been resolved: wifi: iwl4965: Add missing check for create_singlethread_workqueue() ACVE-2023-533035.5In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap api: Fix possible memory leak for vcap_dup_rule() CVE-2023-533045.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: fix overlap expiration walk The lazy gc on CVE-2023-533057.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free Fix potential use-after-free in lCVE-2023-533065.5In the Linux kernel, the following vulnerability has been resolved: fsdax: force clear dirty mark if CoW XFS allows CoW on non-shared exteCVE-2023-533077.8In the Linux kernel, the following vulnerability has been resolved: rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails CVE-2023-533087.8In the Linux kernel, the following vulnerability has been resolved: net: fec: Better handle pm_runtime_get() failing in .remove() In the (
CVE-2023-53297: Medium severity, CVSS 5.5 | Vulnix