PT-2025-40227 · Linux+4 · Linux Kernel+4

Published 2023-07-05 · Updated 2026-05-22 · CVE-2023-53520

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's Bluetooth implementation where a race condition can occur during device suspension. Specifically, if hci unregister dev() frees the hci dev object while hci suspend notifier is still accessing it, a crash can result. The call trace indicates the issue occurs within the hci suspend sync function and related Bluetooth modules. The patch addresses this by maintaining a reference count on the hci dev object during processing in hci suspend notifier to prevent the race condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

CWE-911

CWE-664

Related Identifiers

AZL-75246

BDU:2025-16269

CVE-2023-53520

SUSE-SU-2025:03600-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20851-1

SUSE-SU-2025:20861-1

SUSE-SU-2025:20870-1

SUSE-SU-2025:20898-1

SUSE-SU-2025:3751-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4141-1

USN-8162-1

USN-8180-1

USN-8180-2

USN-8180-3

USN-8180-4

USN-8180-5

USN-8180-6

USN-8186-1

USN-8187-1

USN-8188-1

USN-8243-1

USN-8275-1

USN-8297-1

Affected Products

Debian

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 1869

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53520.json · Exploit
• https://ubuntu.com/security/CVE-2026-23083 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71137 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40055 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68813 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40030 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40149 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23209 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40194 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71111 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40219 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8180-5 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40042 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23038 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40116 · Vendor Advisory