CVE-2023-53386

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: Fix potential use-after-free when clear keys

Similar to commit c5d2b6fa26b5 ("Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk"). We can not access k after kfree_rcu() call.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
LinuxLinux>= d7d41682efc25d58b5bd8b80e85e3c9ce586635c, < e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd; >= d7d41682efc25d58b5bd8b80e85e3c9ce586635c, < 942d8cefb022f384d5424f8b90c7878f3f93726f; >= d7d41682efc25d58b5bd8b80e85e3c9ce586635c, < 94617b736c25091b60e514e2e7aeafcbbee6b700; >= d7d41682efc25d58b5bd8b80e85e3c9ce586635c, < da19f35868dfbecfff4f81166c054d2656cb1be4; >= d7d41682efc25d58b5bd8b80e85e3c9ce586635c, < 35cc42f04bc49f0656f6840cb7451b3df6049649; >= d7d41682efc25d58b5bd8b80e85e3c9ce586635c, < 3673952cf0c6cf81b06c66a0b788abeeb02ff3ae
LinuxLinux5.7

References

Timeline

Published
Sep 18, 2025
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-533875.5In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix device management cmd timeout flow In the UFS errCVE-2023-533887.8In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Clean dangling pointer on bind error path mtk_drm_bind()CVE-2023-533895.5In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dp: Only trigger DRM HPD events if bridge is attached ThCVE-2023-53395.5Mattermost Desktop fails to set an appropriate log level during initial run after fresh installation resulting in logging all keystrokes incCVE-2023-533905.5In the Linux kernel, the following vulnerability has been resolved: drivers: base: dd: fix memory leak with using debugfs_lookup() When caCVE-2023-533915.5In the Linux kernel, the following vulnerability has been resolved: shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs As CVE-2023-533927.1In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix kernel panic during warm reset During warm resCVE-2023-533935.5In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device Currently, whCVE-2023-533945.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix crash on regular rq reactivation When the regular CVE-2023-533957.8In the Linux kernel, the following vulnerability has been resolved: ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer ACPICA commit 9031098CVE-2023-533965.5In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix memory leak in do_rename If renaming a file in an encryptedCVE-2023-533975.5In the Linux kernel, the following vulnerability has been resolved: modpost: fix off by one in is_executable_section() The > comparison sh
CVE-2023-53386: High severity, CVSS 7.8 | Vulnix