PT-2025-18827 · Linux+2 · Linux Kernel+2

Published 2025-05-02 · Updated 2026-04-20 · CVE-2023-53063

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use after free bug has been identified in the Linux kernel's Bluetooth component, specifically in the btsdio remove function due to unfinished work. This issue arises when the btsdio remove function is called while a job is still pending, potentially leading to a race condition and causing an Unaddressed Free (UAF) bug on hdev. The bug is related to the btsdio probe and btsdio send frame functions, where the work variable is scheduled but not properly handled in case of removal.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-11669

CVE-2023-53063

SUSE-SU-2025:02334-1

SUSE-SU-2025_02334-1

Affected Products

Linux Kernel

Red Os

Suse

References · 292

• https://nvd.nist.gov/vuln/detail/CVE-2023-53063 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53063 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-53063 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53063 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02334-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53063 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11669 · Security Note
• https://osv.dev/vulnerability/CVE-2023-53063 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53063 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-53063 · Vendor Advisory
• https://suse.com/security/cve/CVE-2022-50173 · Note
• https://suse.com/security/cve/CVE-2022-49987 · Note
• https://bugzilla.suse.com/1244783 · Note
• https://bugzilla.suse.com/1244886 · Note
• https://bugzilla.suse.com/1242515 · Note