PT-2025-37898 · Linux+3 · Linux Kernel+3

Published 2023-01-01 · Updated 2026-04-20 · CVE-2023-53293

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The btrtl set quirks() function accessed a memory location without verifying its validity, potentially leading to a kernel error when a Realtek Bluetooth controller without a supported driver is installed. The issue involved accessing btrtl dev->ic info->lmp subver without a prior null check.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2023-53293

RHSA-2024:2394

RHSA-2024_2394

Affected Products

Debian

Linux Kernel

Realtek Bluetooth Controller

Red Hat

References · 18

• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-53293 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53293 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53293 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53293 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53293 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53293 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53293 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53293 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53293 · Vendor Advisory
• https://git.kernel.org/stable/c/ea160ece08668a30ce69f92cc08e87da54a64a9c · Note
• https://git.kernel.org/stable/c/253cf30e8d3d001850a95c4729d668f916b037ab · Note
• https://docs.bell-sw.com/security/cves/CVE-2023-53293 · Note
• https://lore.kernel.org/linux-cve-announce/2025091626-CVE-2023-53293-73cb@gregkh/T · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/linus/253cf30e8d3d001850a95c4729d668f916b037ab · Note