PT-2023-8126 · Linux+10 · Linux Kernel+10
Published
2023-12-15
·
Updated
2024-12-19
·
CVE-2023-51779
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 6.6.8
Description
The issue is related to the
bt sock recvmsg() function in the net/bluetooth/af bluetooth.c module of the Linux kernel's Bluetooth driver. It involves a use-after-free condition due to a race condition with bt sock ioctl(). This could allow an attacker to impact the confidentiality, integrity, and availability of protected information.Recommendations
For Linux kernel versions through 6.6.8, update to a version that includes the fix for this issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Race Condition
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu