CVE-2023-40283

2023-08-1400:00:00

ubuntu.com

137

linux kernel

use-after-free

bluetooth

net

mishandling

security vulnerability

race condition

privilege escalation

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c
in the Linux kernel before 6.4.10. There is a use-after-free because the
children of an sk are mishandled.

Bugs

Notes

Author	Note
	Priority reason: A local unprivileged attacker can cause a race condition that will lead to a use-after-free, potentially allowing privilege escalation.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-218.229UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-163.180UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-84.93UNKNOWN
ubuntu23.04noarchlinux< 6.2.0-33.33UNKNOWN
ubuntu14.04noarchlinux< anyUNKNOWN
ubuntu16.04noarchlinux< 4.4.0-245.279UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1161.174UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1110.119UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1045.50UNKNOWN
ubuntu23.04noarchlinux-aws< 6.2.0-1012.12UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	linux	< 4.15.0-218.229	UNKNOWN
ubuntu	20.04	noarch	linux	< 5.4.0-163.180	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-84.93	UNKNOWN
ubuntu	23.04	noarch	linux	< 6.2.0-33.33	UNKNOWN
ubuntu	14.04	noarch	linux	< any	UNKNOWN
ubuntu	16.04	noarch	linux	< 4.4.0-245.279	UNKNOWN
ubuntu	18.04	noarch	linux-aws	< 4.15.0-1161.174	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1110.119	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1045.50	UNKNOWN
ubuntu	23.04	noarch	linux-aws	< 6.2.0-1012.12	UNKNOWN