CVE-2023-54214

A use-after-free flaw was identified in the Linux kernel’s Bluetooth L2CAP implementation. In certain conditions, when allocating a socket buffer via alloc_skb, the kernel may release and later reacquire the channel lock; if the channel is disconnected in the meantime, a subsequent reference to the freed buffer may occur, potentially resulting in a use-after-free condition.

This vulnerability is rated as Moderate severity rather than Important because exploitation requires local access and precise timing to trigger the race condition during Bluetooth channel operations, limiting attack reliability. Furthermore, Bluetooth hardware and services are rarely enabled or utilized in typical enterprise server deployments. Consequently, exposure is largely confined to workstations or systems with active Bluetooth controllers.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.