CVE-2023-54197

A regression was found in the Linux kernel's Bluetooth btsdio driver. A previous commit (1e9ac114c442) intended to fix a use-after-free bug introduced a potential NULL pointer dereference problem. This commit reverts that change since the original issue was properly fixed by a separate commit (73f7b171b7c0) that addressed the race condition correctly.

This is a revert of a problematic fix that introduced a NULL pointer dereference. The underlying use-after-free issue was already resolved by a different, correct fix. Systems with Bluetooth SDIO devices could potentially experience a kernel crash from the NULL pointer dereference until this revert is applied.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the btsdio module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.