CVE-2023-53017

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Mar 27, 2025
Updated: Apr 15, 2025
CWE ID 401

Summary

CVE-2023-53017 is a vulnerability affecting the Linux kernel's Bluetooth subsystem. The issue lies in the function hci_update_adv_data(), where a memory leak occurs when hci_cmd_sync_queue() fails. This results in inst_ptr not being freed, leading to a memory leak. The vulnerability has been rectified by converting inst_ptr to use ERR_PTR/PTR_ERR, eliminating the need for additional memory allocation in the callback.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share