PT-2025-20629 · Linux+3 · Linux Kernel+3

Published 2023-04-10 · Updated 2026-02-02 · CVE-2023-53145

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use after free bug has been identified in the Linux kernel's Bluetooth component, specifically in the btsdio remove function, due to a race condition. This issue arises when the btsdio remove function runs concurrently with an unfinished work, potentially leading to the freeing of hdev while it is still being used in btsdio work. The bug is related to the binding of data->work with btsdio work in the btsdio probe function, which is started in btsdio send frame.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Buffer Overflow

Weakness Enumeration

CWE-416

CWE-119

Related Identifiers

BDU:2026-02186

CVE-2023-53145

SUSE-SU-2025:01918-1

SUSE-SU-2025:01966-1

SUSE-SU-2025:01983-1

SUSE-SU-2025:02173-1

SUSE-SU-2025:02262-1

SUSE-SU-2025:02334-1

SUSE-SU-2025:2173-1

SUSE-SU-2025_01983-1

SUSE-SU-2025_02173-1

SUSE-SU-2025_02262-1

SUSE-SU-2025_02334-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 905

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53145.json · Exploit
• 🔥 https://github.com/aels/CVE-2022-2586-LPE · Exploit
• 🔥 https://github.com/sniper404ghostxploit/CVE-2022-2586 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-53145 · Security Note
• https://git.kernel.org/stable/c/73f7b171b7c09139eb3c6a5677c200dc1be5f318 · Patch
• https://git.kernel.org/stable/c/a6650d27ab2c12a8ee750f396edb5ac8b4558b2e · Patch
• https://git.kernel.org/stable/c/3efcbf25e5ab4d4ad1b7e6ba0869ff85540e3f6e · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53145 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53145 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53145 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02334-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53145 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02186 · Security Note
• http://repo.red-soft.ru/redos/8.0/x86_64/updates · Vendor Advisory
• https://git.kernel.org/stable/c/746b363bef41cc159c051c47f9e30800bc6b520d · Patch