PT-2025-49718 · Linux · Linux Kernel

Published 2025-12-09 · Updated 2026-03-26 · CVE-2023-53827

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's Bluetooth L2CAP implementation, specifically within the l2cap disconnect req and l2cap disconnect rsp functions. This issue involves a use-after-free condition, where memory is accessed after it has been freed, potentially leading to system instability or other undefined behavior. The fix involves using l2cap chan hold unless zero to prevent referencing a channel that is in the process of being destroyed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-53827

RHSA-2026:3360

RHSA-2026:3388

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

SUSE-SU-2026:0928-1

SUSE-SU-2026:0961-1

SUSE-SU-2026:1078-1

Affected Products

Linux Kernel

References · 1110

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53827.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2026:1078-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0928-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53827 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53827 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53827 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53827 · Security Note
• https://osv.dev/vulnerability/CVE-2023-53827 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53827 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53827 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0961-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0411-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory