Findings

CVE-2023-40283

An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10.

Published Aug 14, 2023 · updated Oct 15, 2026 · linux linux kernel

An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 14, 2023 · NIST NVD

    Detected

    An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled.

  2. Oct 15, 2026 · NIST NVD

    Updated

    An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled.

Affected

  • cpe canonical/ubuntu linux14.04
  • cpe debian/debian linux10.0
  • cpe linux/linux kernelversion unspecified

Sources

  • CVE.orgCVE-2023-40283

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2023-40283

    30-day exploitation probability 0.5%

    first.org
  • NIST NVDCVE-2023-40283

    An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled.

    nvd.nist.gov
  • Packet Storm Securityhttp://packetstormsecurity.com/files/175072/Kernel-Live-Patch-Security-Notice-LSN-0098-1.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com
  • Packet Storm Securityhttp://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com

References