PT-2025-13362 · Linux+4 · Linux Kernel+4

Published 2024-04-30 · Updated 2025-09-29 · CVE-2023-53016

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A possible deadlock in the Linux kernel's Bluetooth functionality has been identified. The issue occurs when rfcomm sock connect acquires the sk lock and waits for the rfcomm lock, while rfcomm sock release could have the rfcomm lock and attempt to acquire the sk lock, resulting in a deadlock. The vulnerability is related to the rfcomm sk state change function.

Recommendations To resolve the issue, apply the patch that drops the sk lock before calling rfcomm dlc open to avoid the possible deadlock and holds sk's reference count to prevent use-after-free after rfcomm dlc open completes.

Note: Since the provided information does not specify the exact affected versions or a fixed version, it is not possible to provide version-specific recommendations.

Exploit

Fix

DoS

Improper Locking

Use After Free

Weakness Enumeration

CWE-667

CWE-416

Related Identifiers

ALSA-2025_16880

BDU:2025-06353

CVE-2023-53016

OPENSUSE-SU-2025_1195-1

RHSA-2024:2394

RHSA-2024_2394

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1195-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1195-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Red Os

Suse

References · 1336

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53016.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2023-53016 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53016 · Vendor Advisory
• https://git.kernel.org/stable/c/1d80d57ffcb55488f0ec0b77928d4f82d16b6a90 · Patch
• https://git.kernel.org/stable/c/17511bd84871f4a6106cb335616e086880313f3f · Patch
• https://git.kernel.org/stable/c/98aec50ff7f60cc6f2d6a4396b475c547e58b04d · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53016 · Security Note
• https://bdu.fstec.ru/vul/2025-06353 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53016 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1195-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53016 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53016 · Vendor Advisory