CVE-2023-53017

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix memory leak in hci_update_adv_data() When hci_cmd_sync_queue() failed in hci_update_adv_data(), inst_ptr is not freed, which will cause memory leak, convert to use ERR_PTR/PTR_ERR to pass the instance to callback so no memory needs to be allocated.

Reserved 2025-03-27 | Published 2025-03-27 | Updated 2025-05-04 | Assigner Linux

Product status

Default status
unaffected

651cd3d65b0f76a2198fcf3a80ce5d53dd267717 before 8ac6043bd3e5b58d30f50737aedc2e58e8087ad5
affected

651cd3d65b0f76a2198fcf3a80ce5d53dd267717 before 1ed8b37cbaf14574c779064ef1372af62e8ba6aa
affected

Default status
affected

6.1
affected

Any version before 6.1
unaffected

6.1.9
unaffected

6.2
unaffected

References

git.kernel.org/...c/8ac6043bd3e5b58d30f50737aedc2e58e8087ad5

git.kernel.org/...c/1ed8b37cbaf14574c779064ef1372af62e8ba6aa

cve.org (CVE-2023-53017)

nvd.nist.gov (CVE-2023-53017)

Download JSON