CVE-2023-51779: Use After Free
A flaw was found in the Bluetooth subsystem of the Linux kernel. A race condition between the btsockrecvmsg() and btsockioctl() functions could lead to a use-after-free on a socket buffer ("skb"). A local user could exploit this vulnerability to cause a denial of service condition or potential code execution.
Upstream fix: https://github.com/torvalds/linux/commit/2e07e8348ea454615e268222ae3fc240421be768
Other sources
btsockrecvmsg in net/bluetooth/afbluetooth.c in the Linux kernel through 6.6.8 has a use-after-free because of a btsockioctl race condition.
— Launchpad
Linux Kernel could allow a local authenticated attacker to execute arbitrary code on the system, caused by a use-after-free flaw in the btsockrecvmsg function in net/bluetooth/afbluetooth.c. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service on the system.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-51779?
CVE-2023-51779 has a severity level that can lead to denial of service conditions.
How do I fix CVE-2023-51779?
To resolve CVE-2023-51779, update the Linux kernel to the fixed version provided by your distribution, such as kernel 6.7 for Red Hat or specified versions for Debian.
Which software is affected by CVE-2023-51779?
CVE-2023-51779 affects the Bluetooth subsystem of the Linux kernel in specific versions of both Red Hat and Debian.
What type of vulnerability is CVE-2023-51779?
CVE-2023-51779 is a use-after-free vulnerability caused by a race condition in the Linux kernel's Bluetooth subsystem.
Can CVE-2023-51779 be exploited by local users?
Yes, a local user could exploit CVE-2023-51779 to cause denial of service or potentially gain further access.