CVE-2023-53018
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Mar 27, 2025
Updated: Apr 15, 2025
CWE ID 401
Summary
CVE-2023-53018 is a recently identified vulnerability in the Linux kernel. This issue impacts the Bluetooth subsystem and specifically relates to memory leaks. When the function hci_cmd_sync_queue() fails in hci_le_terminate_big() or hci_le_big_terminate(), the memory allocated to the variable d is not properly released. This oversight results in a persistent memory leak, which can potentially lead to system instability and performance degradation over time. The issue has now been resolved by adding a release process to the error path.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX