CVE-2023-53057

A flaw was found in the Linux kernel's Bluetooth Host Controller Interface (HCI) component. This vulnerability arises from an error in how the hci_init_stage_sync function processes certain variable-length arrays, causing it to access memory beyond its allocated boundaries. A local attacker could exploit this global-out-of-bounds condition to trigger a system crash, leading to a denial of service. This could make the affected system unavailable to legitimate users.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.