CVE-2023-40283

Summary

CVE-2023-40283 is a use-after-free vulnerability affecting the Linux kernel version before 6.4.10 in the net/bluetooth/l2cap_sock.c file. Specifically, an issue was discovered with the l2cap_sock_release function, which fails to properly manage the children of an sk (socket), leading to memory being freed prematurely and subsequently used again. Attackers could exploit this issue to execute arbitrary code or cause a denial-of-service condition. System administrators are advised to upgrade to the patched kernel version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.