Not yet scoredPublished Dec 30, 2025

CVE-2023-54197Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work"

Updated under an hour ago (Oct 27, 2026, 2:00 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" This reverts commit 1e9ac114c4428fdb7ff4635b45d4f46017e8916f. This patch introduces a possible null-ptr-def problem. Revert it. And the fixed bug by this patch have resolved by commit 73f7b171b7c0 ("Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition").

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 23, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	95eacef5692545f199fae4e52abfbfa273acb351 builds before 3b4ed52009723f7dfca7a8ca95163bfb441bfb76; from af4d48754d5517d33bac5e504ff1f1de0808e29e before 70a104588e3131415e559c06deb834ce259a285a; from a18fb433ceb56e0787546a9d77056dd0f215e762 before de0ffb5145c9f418ad76f00e58d4b91c680410b2; from da3d3fdfb4d523c5da30e35a8dd90e04f0fd8962 before 0837d10f6c37a47a0c73bccf1e39513613a2fcc2; from 8efae2112d910d8e5166dd0a836791b08721eef1 before a789192f366147a0fbb395650079906d1d04e0b9; from cbf8deacb7053ce3e3fed64b277c6c6989e65bba before 952030c914b5f2288609efe868537afcff7a3f51; from c59c65a14e8f7d738429648833f3bb3f9df0513f before 8f83fa62614c282dd5d1211a0dd99c6a0a515b81; from 1e9ac114c4428fdb7ff4635b45d4f46017e8916f before d8d7ce037d9a8f1f0714ece268c4c2c50845bbc3; and 8 more ranges	CNA record

References

References

https://git.kernel.org/stable/c/3b4ed52009723f7dfca7a8ca95163bfb441bfb76
https://git.kernel.org/stable/c/70a104588e3131415e559c06deb834ce259a285a
https://git.kernel.org/stable/c/de0ffb5145c9f418ad76f00e58d4b91c680410b2
https://git.kernel.org/stable/c/0837d10f6c37a47a0c73bccf1e39513613a2fcc2
https://git.kernel.org/stable/c/a789192f366147a0fbb395650079906d1d04e0b9
https://git.kernel.org/stable/c/952030c914b5f2288609efe868537afcff7a3f51
https://git.kernel.org/stable/c/8f83fa62614c282dd5d1211a0dd99c6a0a515b81
https://git.kernel.org/stable/c/d8d7ce037d9a8f1f0714ece268c4c2c50845bbc3
https://git.kernel.org/stable/c/db2bf510bd5d57f064d9e1db395ed86a08320c54

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.