CVE-2023-54197

Linux Kernel < 6.3.2 Bluetooth btsdio_remove Null Pointer Dereference

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" This reverts commit 1e9ac114c4428fdb7ff4635b45d4f46017e8916f. This patch introduces a possible null-ptr-def problem. Revert it. And the fixed bug by this patch have resolved by commit 73f7b171b7c0 ("Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition").

References (9)

Core 9

Scores

EPSS 0.0020
EPSS Percentile 10.4%

Details

Status published
Products (35)
linux/Kernel < 4.14.315linux
linux/Kernel 4.15.0 - 4.19.283linux
linux/Kernel 4.20.0 - 5.4.243linux
linux/Kernel 5.11.0 - 5.15.111linux
linux/Kernel 5.16.0 - 6.1.28linux
linux/Kernel 5.5.0 - 5.10.180linux
linux/Kernel 6.2.0 - 6.2.15linux
linux/Kernel 6.3.0 - 6.3.2linux
Linux/Linux < 6.3
Linux/Linux 1e9ac114c4428fdb7ff4635b45d4f46017e8916f - d8d7ce037d9a8f1f0714ece268c4c2c50845bbc3
... and 25 more
Published Dec 30, 2025
Tracked Since Feb 18, 2026