In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: Fix potential use-after-free when clear keys
Similar to commit c5d2b6fa26b5 ("Bluetooth: Fix use-after-free in hciremoveltk/hciremoveirk"). We can not access k after kfree_rcu() call.
{ "vanir_signatures": [ { "id": "CVE-2023-53386-00745db8", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@942d8cefb022f384d5424f8b90c7878f3f93726f", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 171.0, "function_hash": "10732093211983982586981320494890202097" }, "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_smp_ltks_clear" } }, { "id": "CVE-2023-53386-09749bf3", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "319508282252210160201946875373387122119", "257261397727147103243057534388675783851", "73707221677649057579421591465560583282", "33906551961445471724488027858596963127", "325885844061071282232651137029526829189", "285279129669367740535413310576342758939", "324065507230413420992342497831244296814", "242012028747806009077745044931141923999", "253917708383514080904383571591753026470", "319284248301901013117758932381924599020", "109543566805526924869851334868849224337", "98721107225643814740927468240497795369", "253897539795616780461233897512689823540", "261171755140049885583718766476130438133", "259345445032796626249604947405058133609", "60398855634313151329931814130867466854", "23496641073020589049415860606404703398", "173415699148604104931694723770947452312", "205589560563189473063811707240888858679", "308901598994411955478983202930613008132" ] }, "target": { "file": "net/bluetooth/hci_core.c" } }, { "id": "CVE-2023-53386-14428f88", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 166.0, "function_hash": "10454977830471188005543661026169838335" }, "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_link_keys_clear" } }, { "id": "CVE-2023-53386-17da82e1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35cc42f04bc49f0656f6840cb7451b3df6049649", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 180.0, "function_hash": "72151001341864666918147312032236165475" }, "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_smp_irks_clear" } }, { "id": "CVE-2023-53386-25a2a2f4", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35cc42f04bc49f0656f6840cb7451b3df6049649", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 166.0, "function_hash": "10454977830471188005543661026169838335" }, "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_link_keys_clear" } }, { "id": "CVE-2023-53386-46272c1c", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@942d8cefb022f384d5424f8b90c7878f3f93726f", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 166.0, "function_hash": "10454977830471188005543661026169838335" }, "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_link_keys_clear" } }, { "id": "CVE-2023-53386-480c4c57", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3673952cf0c6cf81b06c66a0b788abeeb02ff3ae", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "319508282252210160201946875373387122119", "257261397727147103243057534388675783851", "73707221677649057579421591465560583282", "33906551961445471724488027858596963127", "325885844061071282232651137029526829189", "285279129669367740535413310576342758939", "324065507230413420992342497831244296814", "242012028747806009077745044931141923999", "253917708383514080904383571591753026470", "319284248301901013117758932381924599020", "109543566805526924869851334868849224337", "98721107225643814740927468240497795369", "253897539795616780461233897512689823540", "261171755140049885583718766476130438133", "259345445032796626249604947405058133609", "60398855634313151329931814130867466854", "23496641073020589049415860606404703398", "173415699148604104931694723770947452312", "205589560563189473063811707240888858679", "308901598994411955478983202930613008132" ] }, "target": { "file": "net/bluetooth/hci_core.c" } }, { "id": "CVE-2023-53386-4a37c685", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3673952cf0c6cf81b06c66a0b788abeeb02ff3ae", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 169.0, "function_hash": "302478316003726920234230080882185355935" }, "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_blocked_keys_clear" } }, { "id": "CVE-2023-53386-52356bd4", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94617b736c25091b60e514e2e7aeafcbbee6b700", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "319508282252210160201946875373387122119", "257261397727147103243057534388675783851", "73707221677649057579421591465560583282", "33906551961445471724488027858596963127", "325885844061071282232651137029526829189", "285279129669367740535413310576342758939", "324065507230413420992342497831244296814", "242012028747806009077745044931141923999", "253917708383514080904383571591753026470", "319284248301901013117758932381924599020", "109543566805526924869851334868849224337", "98721107225643814740927468240497795369", "253897539795616780461233897512689823540", "261171755140049885583718766476130438133", "259345445032796626249604947405058133609", "60398855634313151329931814130867466854", "23496641073020589049415860606404703398", "173415699148604104931694723770947452312", "205589560563189473063811707240888858679", "308901598994411955478983202930613008132" ] }, "target": { "file": "net/bluetooth/hci_core.c" } }, { "id": "CVE-2023-53386-56269e33", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da19f35868dfbecfff4f81166c054d2656cb1be4", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "319508282252210160201946875373387122119", "257261397727147103243057534388675783851", "73707221677649057579421591465560583282", "33906551961445471724488027858596963127", "325885844061071282232651137029526829189", "285279129669367740535413310576342758939", "324065507230413420992342497831244296814", "242012028747806009077745044931141923999", "253917708383514080904383571591753026470", "319284248301901013117758932381924599020", "109543566805526924869851334868849224337", "98721107225643814740927468240497795369", "253897539795616780461233897512689823540", "261171755140049885583718766476130438133", "259345445032796626249604947405058133609", "60398855634313151329931814130867466854", "23496641073020589049415860606404703398", "173415699148604104931694723770947452312", "205589560563189473063811707240888858679", "308901598994411955478983202930613008132" ] }, "target": { "file": "net/bluetooth/hci_core.c" } }, { "id": "CVE-2023-53386-5df8628d", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94617b736c25091b60e514e2e7aeafcbbee6b700", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 171.0, "function_hash": "10732093211983982586981320494890202097" }, "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_smp_ltks_clear" } }, { "id": "CVE-2023-53386-71552d93", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da19f35868dfbecfff4f81166c054d2656cb1be4", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 166.0, "function_hash": "10454977830471188005543661026169838335" }, "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_link_keys_clear" } }, { "id": "CVE-2023-53386-7bc53589", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3673952cf0c6cf81b06c66a0b788abeeb02ff3ae", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 171.0, "function_hash": "10732093211983982586981320494890202097" }, "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_smp_ltks_clear" } }, { "id": "CVE-2023-53386-915cb109", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3673952cf0c6cf81b06c66a0b788abeeb02ff3ae", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 166.0, "function_hash": "10454977830471188005543661026169838335" }, "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_link_keys_clear" } }, { "id": "CVE-2023-53386-970fb081", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94617b736c25091b60e514e2e7aeafcbbee6b700", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 180.0, "function_hash": "72151001341864666918147312032236165475" }, "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_smp_irks_clear" } }, { "id": "CVE-2023-53386-9e2ef080", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35cc42f04bc49f0656f6840cb7451b3df6049649", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 169.0, "function_hash": "302478316003726920234230080882185355935" }, "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_blocked_keys_clear" } }, { "id": "CVE-2023-53386-a017d8fa", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94617b736c25091b60e514e2e7aeafcbbee6b700", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 169.0, "function_hash": "302478316003726920234230080882185355935" }, "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_blocked_keys_clear" } }, { "id": "CVE-2023-53386-b1b00db9", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@942d8cefb022f384d5424f8b90c7878f3f93726f", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 169.0, "function_hash": "302478316003726920234230080882185355935" }, "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_blocked_keys_clear" } }, { "id": "CVE-2023-53386-b2b82b8e", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35cc42f04bc49f0656f6840cb7451b3df6049649", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "319508282252210160201946875373387122119", "257261397727147103243057534388675783851", "73707221677649057579421591465560583282", "33906551961445471724488027858596963127", "325885844061071282232651137029526829189", "285279129669367740535413310576342758939", "324065507230413420992342497831244296814", "242012028747806009077745044931141923999", "253917708383514080904383571591753026470", "319284248301901013117758932381924599020", "109543566805526924869851334868849224337", "98721107225643814740927468240497795369", "253897539795616780461233897512689823540", "261171755140049885583718766476130438133", "259345445032796626249604947405058133609", "60398855634313151329931814130867466854", "23496641073020589049415860606404703398", "173415699148604104931694723770947452312", "205589560563189473063811707240888858679", "308901598994411955478983202930613008132" ] }, "target": { "file": "net/bluetooth/hci_core.c" } }, { "id": "CVE-2023-53386-c5fc7e01", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da19f35868dfbecfff4f81166c054d2656cb1be4", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 171.0, "function_hash": "10732093211983982586981320494890202097" }, "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_smp_ltks_clear" } }, { "id": "CVE-2023-53386-d100502e", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@942d8cefb022f384d5424f8b90c7878f3f93726f", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 180.0, "function_hash": "72151001341864666918147312032236165475" }, "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_smp_irks_clear" } }, { "id": "CVE-2023-53386-d1442f38", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35cc42f04bc49f0656f6840cb7451b3df6049649", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 171.0, "function_hash": "10732093211983982586981320494890202097" }, "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_smp_ltks_clear" } }, { "id": "CVE-2023-53386-decdb6ad", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 180.0, "function_hash": "72151001341864666918147312032236165475" }, "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_smp_irks_clear" } }, { "id": "CVE-2023-53386-ea790cf8", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3673952cf0c6cf81b06c66a0b788abeeb02ff3ae", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 180.0, "function_hash": "72151001341864666918147312032236165475" }, "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_smp_irks_clear" } }, { "id": "CVE-2023-53386-efaac232", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 169.0, "function_hash": "302478316003726920234230080882185355935" }, "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_blocked_keys_clear" } }, { "id": "CVE-2023-53386-f945cac3", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 171.0, "function_hash": "10732093211983982586981320494890202097" }, "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_smp_ltks_clear" } }, { "id": "CVE-2023-53386-f9a9bd1c", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94617b736c25091b60e514e2e7aeafcbbee6b700", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 166.0, "function_hash": "10454977830471188005543661026169838335" }, "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_link_keys_clear" } }, { "id": "CVE-2023-53386-f9bc35d6", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@942d8cefb022f384d5424f8b90c7878f3f93726f", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "319508282252210160201946875373387122119", "257261397727147103243057534388675783851", "73707221677649057579421591465560583282", "33906551961445471724488027858596963127", "325885844061071282232651137029526829189", "285279129669367740535413310576342758939", "324065507230413420992342497831244296814", "242012028747806009077745044931141923999", "253917708383514080904383571591753026470", "319284248301901013117758932381924599020", "109543566805526924869851334868849224337", "98721107225643814740927468240497795369", "253897539795616780461233897512689823540", "261171755140049885583718766476130438133", "259345445032796626249604947405058133609", "60398855634313151329931814130867466854", "23496641073020589049415860606404703398", "173415699148604104931694723770947452312", "205589560563189473063811707240888858679", "308901598994411955478983202930613008132" ] }, "target": { "file": "net/bluetooth/hci_core.c" } }, { "id": "CVE-2023-53386-fc099043", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da19f35868dfbecfff4f81166c054d2656cb1be4", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 169.0, "function_hash": "302478316003726920234230080882185355935" }, "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_blocked_keys_clear" } }, { "id": "CVE-2023-53386-ff072670", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da19f35868dfbecfff4f81166c054d2656cb1be4", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 180.0, "function_hash": "72151001341864666918147312032236165475" }, "target": { "file": "net/bluetooth/hci_core.c", "function": "hci_smp_irks_clear" } } ] }