CVE-2023-53145

HIGH
MEDIUM Priority: 0.02 BB Relevance: 41/100
Published: 2025-05-10 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition In btsdio_probe, the data->work is bound with btsdio_work. It will be started in btsdio_send_frame. If the btsdio_remove runs with a unfinished work, there may be a race condition that hdev is freed but used in btsdio_work. Fix it by canceling the work before do cleanup in btsdio_remove.

Weakness Classification (1)

Affected Software (15)

VendorProductVersion
Linux Linux ddbaf13e3609442b64abb931ac21527772d87980 < 6c3653627397a0d6eab19b20a59423e118985a6b
Linux Linux ddbaf13e3609442b64abb931ac21527772d87980 < 3efcbf25e5ab4d4ad1b7e6ba0869ff85540e3f6e
Linux Linux ddbaf13e3609442b64abb931ac21527772d87980 < a6650d27ab2c12a8ee750f396edb5ac8b4558b2e
Linux Linux ddbaf13e3609442b64abb931ac21527772d87980 < 746b363bef41cc159c051c47f9e30800bc6b520d
Linux Linux ddbaf13e3609442b64abb931ac21527772d87980 < a5c2a467e9e789ae0891de55b766daac52e3b7b3
Linux Linux ddbaf13e3609442b64abb931ac21527772d87980 < 179c65828593aff1f444e15debd40a477cb23cf4
Linux Linux ddbaf13e3609442b64abb931ac21527772d87980 < 73f7b171b7c09139eb3c6a5677c200dc1be5f318
Linux Linux 2.6.24
linux linux_kernel < 4.14.326
linux linux_kernel 6.3
linux linux_kernel 6.3
linux linux_kernel 6.3
linux linux_kernel 6.3
linux linux_kernel 6.3
linux linux_kernel 6.3

Bug Bounty Relevance

41 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

7.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.19%
Raw Score 0.001930
Percentile 9.0%
Date 2026-11-06

EPSS Trend

2026-11-06
0.00193
2026-11-05
0.00193

Intelligence Sources

mitre ref →
nvd ref →