CVE-2023-28464

Published: Mar 31, 2023Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_conn_hash_flush) because of calls to hci_dev_put and hci_conn_put. There is a double free that may lead to privilege escalation.

Affected (14)

Products: Linux: Linux Kernel · Netapp: H300s Firmware, H410c Firmware, H410s Firmware, H500s Firmware, H700s Firmware

1 product

5 products

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 6.1.25
Linux Linux Kernel	Version 6.2.12
Linux Linux Kernel	Version 6.3
Linux Linux Kernel	Version 6.3 rc1
Linux Linux Kernel	Version 6.3 rc2
Linux Linux Kernel	Version 6.3 rc3
Linux Linux Kernel	Version 6.3 rc4
Linux Linux Kernel	Version 6.3 rc5
Linux Linux Kernel	Version 6.3 rc6

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Netapp H300s Firmware	All versions
Netapp H410c Firmware	All versions
Netapp H410s Firmware	All versions
Netapp H500s Firmware	All versions
Netapp H700s Firmware	All versions