GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

FKIE_CVE-2023-54197

Vulnerability from fkie_nvd - Published: 2025-12-30 13:16 - Updated: 2026-06-17 06:46
Severity
Summary
In the Linux kernel, the following vulnerability has been resolved: Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" This reverts commit 1e9ac114c4428fdb7ff4635b45d4f46017e8916f. This patch introduces a possible null-ptr-def problem. Revert it. And the fixed bug by this patch have resolved by commit 73f7b171b7c0 ("Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition").
References
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/0837d10f6c37a47a0c73bccf1e39513613a2fcc2
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/3b4ed52009723f7dfca7a8ca95163bfb441bfb76
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/70a104588e3131415e559c06deb834ce259a285a
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8f83fa62614c282dd5d1211a0dd99c6a0a515b81
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/952030c914b5f2288609efe868537afcff7a3f51
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a789192f366147a0fbb395650079906d1d04e0b9
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d8d7ce037d9a8f1f0714ece268c4c2c50845bbc3
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/db2bf510bd5d57f064d9e1db395ed86a08320c54
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/de0ffb5145c9f418ad76f00e58d4b91c680410b2
Impacted products
Vendor Product Version
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/bluetooth/btsdio.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "3b4ed52009723f7dfca7a8ca95163bfb441bfb76",
              "status": "affected",
              "version": "95eacef5692545f199fae4e52abfbfa273acb351",
              "versionType": "git"
            },
            {
              "lessThan": "70a104588e3131415e559c06deb834ce259a285a",
              "status": "affected",
              "version": "af4d48754d5517d33bac5e504ff1f1de0808e29e",
              "versionType": "git"
            },
            {
              "lessThan": "de0ffb5145c9f418ad76f00e58d4b91c680410b2",
              "status": "affected",
              "version": "a18fb433ceb56e0787546a9d77056dd0f215e762",
              "versionType": "git"
            },
            {
              "lessThan": "0837d10f6c37a47a0c73bccf1e39513613a2fcc2",
              "status": "affected",
              "version": "da3d3fdfb4d523c5da30e35a8dd90e04f0fd8962",
              "versionType": "git"
            },
            {
              "lessThan": "a789192f366147a0fbb395650079906d1d04e0b9",
              "status": "affected",
              "version": "8efae2112d910d8e5166dd0a836791b08721eef1",
              "versionType": "git"
            },
            {
              "lessThan": "952030c914b5f2288609efe868537afcff7a3f51",
              "status": "affected",
              "version": "cbf8deacb7053ce3e3fed64b277c6c6989e65bba",
              "versionType": "git"
            },
            {
              "lessThan": "8f83fa62614c282dd5d1211a0dd99c6a0a515b81",
              "status": "affected",
              "version": "c59c65a14e8f7d738429648833f3bb3f9df0513f",
              "versionType": "git"
            },
            {
              "lessThan": "d8d7ce037d9a8f1f0714ece268c4c2c50845bbc3",
              "status": "affected",
              "version": "1e9ac114c4428fdb7ff4635b45d4f46017e8916f",
              "versionType": "git"
            },
            {
              "lessThan": "db2bf510bd5d57f064d9e1db395ed86a08320c54",
              "status": "affected",
              "version": "1e9ac114c4428fdb7ff4635b45d4f46017e8916f",
              "versionType": "git"
            },
            {
              "lessThan": "4.14.315",
              "status": "affected",
              "version": "4.14.312",
              "versionType": "semver"
            },
            {
              "lessThan": "4.19.283",
              "status": "affected",
              "version": "4.19.280",
              "versionType": "semver"
            },
            {
              "lessThan": "5.4.243",
              "status": "affected",
              "version": "5.4.240",
              "versionType": "semver"
            },
            {
              "lessThan": "5.10.180",
              "status": "affected",
              "version": "5.10.177",
              "versionType": "semver"
            },
            {
              "lessThan": "5.15.111",
              "status": "affected",
              "version": "5.15.105",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.28",
              "status": "affected",
              "version": "6.1.22",
              "versionType": "semver"
            },
            {
              "lessThan": "6.2.15",
              "status": "affected",
              "version": "6.2.9",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/bluetooth/btsdio.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.3"
            },
            {
              "lessThan": "6.3",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.315",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.283",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.243",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.180",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.111",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.28",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.2.*",
              "status": "unaffected",
              "version": "6.2.15",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.3.*",
              "status": "unaffected",
              "version": "6.3.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.4",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work\"\n\nThis reverts commit 1e9ac114c4428fdb7ff4635b45d4f46017e8916f.\n\nThis patch introduces a possible null-ptr-def problem. Revert it. And the\nfixed bug by this patch have resolved by commit 73f7b171b7c0 (\"Bluetooth:\nbtsdio: fix use after free bug in btsdio_remove due to race condition\")."
    }
  ],
  "id": "CVE-2023-54197",
  "lastModified": "2026-06-17T06:46:59.903",
  "metrics": {},
  "published": "2025-12-30T13:16:07.767",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/0837d10f6c37a47a0c73bccf1e39513613a2fcc2"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/3b4ed52009723f7dfca7a8ca95163bfb441bfb76"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/70a104588e3131415e559c06deb834ce259a285a"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/8f83fa62614c282dd5d1211a0dd99c6a0a515b81"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/952030c914b5f2288609efe868537afcff7a3f51"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/a789192f366147a0fbb395650079906d1d04e0b9"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/d8d7ce037d9a8f1f0714ece268c4c2c50845bbc3"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/db2bf510bd5d57f064d9e1db395ed86a08320c54"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/de0ffb5145c9f418ad76f00e58d4b91c680410b2"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Deferred"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.