CVE-2023-52518

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
02/03/2024
Last modified:
19/03/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> Bluetooth: hci_codec: Fix leaking content of local_codecs<br /> <br /> The following memory leak can be observed when the controller supports<br /> codecs which are stored in local_codecs list but the elements are never<br /> freed:<br /> <br /> unreferenced object 0xffff88800221d840 (size 32):<br /> comm "kworker/u3:0", pid 36, jiffies 4294898739 (age 127.060s)<br /> hex dump (first 32 bytes):<br /> f8 d3 02 03 80 88 ff ff 80 d8 21 02 80 88 ff ff ..........!.....<br /> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................<br /> backtrace:<br /> [] __kmalloc+0x47/0x120<br /> [] hci_codec_list_add.isra.0+0x2d/0x160<br /> [] hci_read_codec_capabilities+0x183/0x270<br /> [] hci_read_supported_codecs+0x1bb/0x2d0<br /> [] hci_read_local_codecs_sync+0x3e/0x60<br /> [] hci_dev_open_sync+0x943/0x11e0<br /> [] hci_power_on+0x10d/0x3f0<br /> [] process_one_work+0x404/0x800<br /> [] worker_thread+0x374/0x670<br /> [] kthread+0x188/0x1c0<br /> [] ret_from_fork+0x2b/0x50<br /> [] ret_from_fork_asm+0x1a/0x30

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 6.1.57 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2 (including) 6.5.7 (excluding)
cpe:2.3:o:linux:linux_kernel:6.6:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc4:*:*:*:*:*:*