CVE Database›Document archive›CVE-2023-52830

CVE-2023-52830

kernel: Bluetooth: Fix double free in hci_conn_cleanup

Loading…

Severity

Unknown

Red Hat Product Security

0

CVSS 3.1

Review impact separately from score.

Published · May 21, 2024

Updated · November 21, 2025

Description

[REJECTED CVE] A vulnerability was identified in the Bluetooth subsystem of the Linux kernel within the hci_conn_cleanup function. When cleaning up connections, the same object could be freed multiple times due to redundant calls to hci_dev_put and hci_conn_put after it was already released by hci_conn_del_sysfs.

Statement

This CVE has been rejected upstream: https://lore.kernel.org/linux-cve-announce/2024052213-REJECTED-c87f@gregkh/

Red Hat has also evaluated this issue and determined that it does not meet the criteria to be classified as a security vulnerability. This assessment is based on the issue not posing a significant security risk, being a result of misconfiguration or usage error, or falling outside the scope of security considerations.

As such, this CVE has been marked as "Rejected" in alignment with Red Hat's vulnerability management policies.

If you have additional information or concerns regarding this determination, please contact Red Hat Product Security for further clarification.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 0
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N

CWE-415 · Double Free