<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 04 Oct 2026 11:11:40 +0000</lastBuildDate>
    <item>
      <title>CVE-2023-52518 — Bluetooth: hci_codec: Fix leaking content of local_codecs</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2023-52518</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Linux&lt;/p&gt;
&lt;p&gt;In the Linux kernel, the following vulnerability has been resolved:&lt;/p&gt;
&lt;p&gt;Bluetooth: hci_codec: Fix leaking content of local_codecs&lt;/p&gt;
&lt;p&gt;The following memory leak can be observed when the controller supports
codecs which are stored in local_codecs list but the elements are never
freed:&lt;/p&gt;
&lt;p&gt;unreferenced object 0xffff88800221d840 (size 32):
  comm &amp;#34;kworker/u3:0&amp;#34;, pid 36, jiffies 4294898739 (age 127.060s)
  hex dump (first 32 bytes):
    f8 d3 02 03 80 88 ff ff 80 d8 21 02 80 88 ff ff  ..........!.....
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [&amp;lt;ffffffffb324f557&amp;gt;] __kmalloc+0x47/0x120
    [&amp;lt;ffffffffb39ef37d&amp;gt;] hci_codec_list_add.isra.0+0x2d/0x160
    [&amp;lt;ffffffffb39ef643&amp;gt;] hci_read_codec_capabilities+0x183/0x270
    [&amp;lt;ffffffffb39ef9ab&amp;gt;] hci_read_supported_codecs+0x1bb/0x2d0
    [&amp;lt;ffffffffb39f162e&amp;gt;] hci_read_local_codecs_sync+0x3e/0x60
    [&amp;lt;ffffffffb39ff1b3&amp;gt;] hci_dev_open_sync+0x943/0x11e0
    [&amp;lt;ffffffffb396d55d&amp;gt;] hci_power_on+0x10d/0x3f0
    [&amp;lt;ffffffffb30c99b4&amp;gt;] process_one_work+0x404/0x800
    [&amp;lt;ffffffffb30ca134&amp;gt;] worker_thread+0x374/0x670
    [&amp;lt;ffffffffb30d9108&amp;gt;] kthread+0x188/0x1c0
    [&amp;lt;ffffffffb304db6b&amp;gt;] ret_from_fork+0x2b/0x50
    [&amp;lt;ffffffffb300206a&amp;gt;] ret_from_fork_asm+0x1a/0x30&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Linux&lt;/p&gt;
&lt;p&gt;In the Linux kernel, the following vulnerability has been resolved:&lt;/p&gt;
&lt;p&gt;Bluetooth: hci_codec: Fix leaking content of local_codecs&lt;/p&gt;
&lt;p&gt;The following memory leak can be observed when the controller supports
codecs which are stored in local_codecs list but the elements are never
freed:&lt;/p&gt;
&lt;p&gt;unreferenced object 0xffff88800221d840 (size 32):
  comm &amp;#34;kworker/u3:0&amp;#34;, pid 36, jiffies 4294898739 (age 127.060s)
  hex dump (first 32 bytes):
    f8 d3 02 03 80 88 ff ff 80 d8 21 02 80 88 ff ff  ..........!.....
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [&amp;lt;ffffffffb324f557&amp;gt;] __kmalloc+0x47/0x120
    [&amp;lt;ffffffffb39ef37d&amp;gt;] hci_codec_list_add.isra.0+0x2d/0x160
    [&amp;lt;ffffffffb39ef643&amp;gt;] hci_read_codec_capabilities+0x183/0x270
    [&amp;lt;ffffffffb39ef9ab&amp;gt;] hci_read_supported_codecs+0x1bb/0x2d0
    [&amp;lt;ffffffffb39f162e&amp;gt;] hci_read_local_codecs_sync+0x3e/0x60
    [&amp;lt;ffffffffb39ff1b3&amp;gt;] hci_dev_open_sync+0x943/0x11e0
    [&amp;lt;ffffffffb396d55d&amp;gt;] hci_power_on+0x10d/0x3f0
    [&amp;lt;ffffffffb30c99b4&amp;gt;] process_one_work+0x404/0x800
    [&amp;lt;ffffffffb30ca134&amp;gt;] worker_thread+0x374/0x670
    [&amp;lt;ffffffffb30d9108&amp;gt;] kthread+0x188/0x1c0
    [&amp;lt;ffffffffb304db6b&amp;gt;] ret_from_fork+0x2b/0x50
    [&amp;lt;ffffffffb300206a&amp;gt;] ret_from_fork_asm+0x1a/0x30&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2023-52518</guid>
    </item>
  </channel>
</rss>
