High 8.8Published Dec 8, 2025

CVE-2023-53827Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp}

Updated under an hour ago (Oct 27, 2026, 12:00 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} Similar to commit d0be8347c623 ("Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put"), just use l2cap_chan_hold_unless_zero to prevent referencing a channel that is about to be destroyed.

CVSS: 8.8 HIGH (v3.1, CNA)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: Oct 15, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 before f2d38e77aa5f3effc143e7dd24da8acf02925958; from 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 before 1351551aa9058e07a20a27a158270cf84fcde621; from 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 before c02421992505c95c7f3c9ad59ee35e22eac60988; from 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 before d9ba36c22a7bb09d6bac4cc2f243eff05da53f43; from 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 before ac6725a634f7e8c0330610a8527f20c730b61115; from 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 before 348d446762e7c70778df8bafbdf3fa0df2123f58; from 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 before d82a439c3cfdb28aa7e82e2e849c5c4dd9fca284; from 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 before a2a9339e1c9deb7e1e079e12e27a0265aea8421a	CNA record

References

References

https://git.kernel.org/stable/c/f2d38e77aa5f3effc143e7dd24da8acf02925958
https://git.kernel.org/stable/c/1351551aa9058e07a20a27a158270cf84fcde621
https://git.kernel.org/stable/c/c02421992505c95c7f3c9ad59ee35e22eac60988
https://git.kernel.org/stable/c/d9ba36c22a7bb09d6bac4cc2f243eff05da53f43
https://git.kernel.org/stable/c/ac6725a634f7e8c0330610a8527f20c730b61115
https://git.kernel.org/stable/c/348d446762e7c70778df8bafbdf3fa0df2123f58
https://git.kernel.org/stable/c/d82a439c3cfdb28aa7e82e2e849c5c4dd9fca284
https://git.kernel.org/stable/c/a2a9339e1c9deb7e1e079e12e27a0265aea8421a

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.