CVE-2023-31083: Null Pointer Dereference
A flaw in the Linux Kernel found in drivers/bluetooth/hcildisc.c. There is a race condition between HCIUARTSETPROTO and HCIUARTGETPROTO. HCIUARTPROTOSET is set before hu->proto is set. A NULL pointer dereference may occur.
Reference: https://lore.kernel.org/all/CA+UBctC3p49aTgzbVgkSZ2+TQcqq4fPDO7yZitFT5uBPDeCO2g@mail.gmail.com/
Other sources
An issue was discovered in drivers/bluetooth/hcildisc.c in the Linux kernel 6.2. In hciuartttyioctl, there is a race condition between HCIUARTSETPROTO and HCIUARTGETPROTO. HCIUARTPROTOSET is set before hu->proto is set. A NULL pointer dereference may occur.
— Launchpad
Linux Kernel is vulnerable to a denial of service, caused by a race condition between HCIUARTSETPROTO and HCIUARTGETPROTO in the hciuartttyioctl function in drivers/bluetooth/hcildisc.c. By sending a specially crafted request, a local attacker could exploit this vulnerability to cause a denial of service condition.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-31083?
CVE-2023-31083 has a medium severity rating due to the potential for a NULL pointer dereference.
How do I fix CVE-2023-31083?
To fix CVE-2023-31083, upgrade the Linux kernel to versions 5.10.226-1, 6.1.128-1, or higher.
Which versions of the Linux Kernel are affected by CVE-2023-31083?
CVE-2023-31083 affects Linux Kernel version 6.2 and below.
What is the impacted component of CVE-2023-31083?
The impacted component in CVE-2023-31083 is the Bluetooth driver in the Linux Kernel.
Is CVE-2023-31083 a critical vulnerability?
CVE-2023-31083 is not classified as a critical vulnerability, but it could potentially lead to system instability.