Security Advisory

CVE-2023-53145

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-05-10 14:19:14
Last updated 2026-05-11 19:39:18
Assigner Linux
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition In btsdio_probe, the data->work is bound with btsdio_work. It will be started in btsdio_send_frame. If the btsdio_remove runs with a unfinished work, there may be a race condition that hdev is freed but used in btsdio_work. Fix it by canceling the work before do cleanup in btsdio_remove.