Vulnerability-Lookup

CVE-2023-53386 (GCVE-0-2023-53386)

Vulnerability from cvelistv5 – Published: 2025-09-18 13:33 – Updated: 2026-08-05 09:13

Title

Bluetooth: Fix potential use-after-free when clear keys

Summary

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix potential use-after-free when clear keys Similar to commit c5d2b6fa26b5 ("Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk"). We can not access k after kfree_rcu() call.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-01-14 18:57 UTC

CWE

CWE-416 - Use After Free

Assigner

Linux mitre root

References

6 references

URL	Tags
https://git.kernel.org/stable/c/e87da6a0ac6e63145…
https://git.kernel.org/stable/c/942d8cefb022f384d…
https://git.kernel.org/stable/c/94617b736c25091b6…
https://git.kernel.org/stable/c/da19f35868dfbecff…
https://git.kernel.org/stable/c/35cc42f04bc49f065…
https://git.kernel.org/stable/c/3673952cf0c6cf81b…

Impacted products

2 products

Vendor	Product	Version	CPE status
Linux	Linux	Affected: d7d41682efc25d58b5bd8b80e85e3c9ce586635c , < e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd (git) Affected: d7d41682efc25d58b5bd8b80e85e3c9ce586635c , < 942d8cefb022f384d5424f8b90c7878f3f93726f (git) Affected: d7d41682efc25d58b5bd8b80e85e3c9ce586635c , < 94617b736c25091b60e514e2e7aeafcbbee6b700 (git) Affected: d7d41682efc25d58b5bd8b80e85e3c9ce586635c , < da19f35868dfbecfff4f81166c054d2656cb1be4 (git) Affected: d7d41682efc25d58b5bd8b80e85e3c9ce586635c , < 35cc42f04bc49f0656f6840cb7451b3df6049649 (git) Affected: d7d41682efc25d58b5bd8b80e85e3c9ce586635c , < 3673952cf0c6cf81b06c66a0b788abeeb02ff3ae (git)	guessed
Linux	Linux	Affected: 5.7 Unaffected: 0 , < 5.7 (semver) Unaffected: 5.10.195 , ≤ 5.10.* (semver) Unaffected: 5.15.132 , ≤ 5.15.* (semver) Unaffected: 6.1.53 , ≤ 6.1.* (semver) Unaffected: 6.4.16 , ≤ 6.4.* (semver) Unaffected: 6.5.3 , ≤ 6.5.* (semver) Unaffected: 6.6 , ≤ * (original_commit_for_fix)	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-53386",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-14T18:57:47.458319Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-14T19:03:04.934Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/hci_core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd",
              "status": "affected",
              "version": "d7d41682efc25d58b5bd8b80e85e3c9ce586635c",
              "versionType": "git"
            },
            {
              "lessThan": "942d8cefb022f384d5424f8b90c7878f3f93726f",
              "status": "affected",
              "version": "d7d41682efc25d58b5bd8b80e85e3c9ce586635c",
              "versionType": "git"
            },
            {
              "lessThan": "94617b736c25091b60e514e2e7aeafcbbee6b700",
              "status": "affected",
              "version": "d7d41682efc25d58b5bd8b80e85e3c9ce586635c",
              "versionType": "git"
            },
            {
              "lessThan": "da19f35868dfbecfff4f81166c054d2656cb1be4",
              "status": "affected",
              "version": "d7d41682efc25d58b5bd8b80e85e3c9ce586635c",
              "versionType": "git"
            },
            {
              "lessThan": "35cc42f04bc49f0656f6840cb7451b3df6049649",
              "status": "affected",
              "version": "d7d41682efc25d58b5bd8b80e85e3c9ce586635c",
              "versionType": "git"
            },
            {
              "lessThan": "3673952cf0c6cf81b06c66a0b788abeeb02ff3ae",
              "status": "affected",
              "version": "d7d41682efc25d58b5bd8b80e85e3c9ce586635c",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/hci_core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.7"
            },
            {
              "lessThan": "5.7",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.195",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.132",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.53",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.*",
              "status": "unaffected",
              "version": "6.4.16",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.5.*",
              "status": "unaffected",
              "version": "6.5.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.6",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.195",
                  "versionStartIncluding": "5.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.132",
                  "versionStartIncluding": "5.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.53",
                  "versionStartIncluding": "5.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4.16",
                  "versionStartIncluding": "5.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5.3",
                  "versionStartIncluding": "5.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6",
                  "versionStartIncluding": "5.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: Fix potential use-after-free when clear keys\n\nSimilar to commit c5d2b6fa26b5 (\"Bluetooth: Fix use-after-free in\nhci_remove_ltk/hci_remove_irk\"). We can not access k after kfree_rcu()\ncall."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The UAF is reached via local AF_BLUETOOTH HCI_CHANNEL_CONTROL MGMT commands (LOAD_LINK_KEYS/LTKs/IRKs, SET_BLOCKED_KEYS) or hci_release_dev teardown; no over-the-air peer data drives the clear-keys path, matching prior mgmt.c scoring (e.g. CVE-2024-53208, CVE-2024-49951).\nAC:L - The attacker deterministically populates a key list then re-issues the same MGMT load/clear command (or tears down the adapter), and under PREEMPT the kfree_rcu\u2192list_next_entry window is attacker-retryable with a long key list and heap spray; no condition outside attacker control is required.\nPR:L - Trusted MGMT handlers require CAP_NET_ADMIN (HCI_SOCK_TRUSTED), which real deployments grant to non-root Bluetooth services (bluetoothd, Android AID_BLUETOOTH) rather than full root; consistent with prior CAP_NET_ADMIN-gated mgmt UAF scores.\nUI:N - The attacker issues the MGMT commands (or drives adapter teardown) entirely from its own process; no victim interaction is required.\nS:U - The use-after-free corrupts kernel heap within the same kernel security authority; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - This is a use-after-free of sprayable kmalloc key objects (link_key/smp_ltk/smp_irk/blocked_key); after reclaim, reading the stale list next pointer and related fields yields an attacker-influenced kernel memory disclosure primitive.\nI:H - UAF of these heap objects enables heap grooming for write/control-flow hijack via corrupted list linkage and subsequent operations on attacker-controlled freed memory, per standard kernel UAF integrity scoring.\nA:H - Dereferencing freed key objects during list iteration reliably produces KASAN reports, oopses, or panics, and any use-after-free is scored High availability."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:13:49.431Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd"
        },
        {
          "url": "https://git.kernel.org/stable/c/942d8cefb022f384d5424f8b90c7878f3f93726f"
        },
        {
          "url": "https://git.kernel.org/stable/c/94617b736c25091b60e514e2e7aeafcbbee6b700"
        },
        {
          "url": "https://git.kernel.org/stable/c/da19f35868dfbecfff4f81166c054d2656cb1be4"
        },
        {
          "url": "https://git.kernel.org/stable/c/35cc42f04bc49f0656f6840cb7451b3df6049649"
        },
        {
          "url": "https://git.kernel.org/stable/c/3673952cf0c6cf81b06c66a0b788abeeb02ff3ae"
        }
      ],
      "title": "Bluetooth: Fix potential use-after-free when clear keys",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53386",
    "datePublished": "2025-09-18T13:33:29.897Z",
    "dateReserved": "2025-09-17T14:54:09.737Z",
    "dateUpdated": "2026-08-05T09:13:49.431Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-53386",
      "date": "2026-09-16",
      "epss": "0.00149",
      "percentile": "0.04465"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-53386\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-09-18T14:15:41.660\",\"lastModified\":\"2026-06-17T06:45:10.717\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nBluetooth: Fix potential use-after-free when clear keys\\n\\nSimilar to commit c5d2b6fa26b5 (\\\"Bluetooth: Fix use-after-free in\\nhci_remove_ltk/hci_remove_irk\\\"). We can not access k after kfree_rcu()\\ncall.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/bluetooth/hci_core.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"d7d41682efc25d58b5bd8b80e85e3c9ce586635c\",\"lessThan\":\"e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d7d41682efc25d58b5bd8b80e85e3c9ce586635c\",\"lessThan\":\"942d8cefb022f384d5424f8b90c7878f3f93726f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d7d41682efc25d58b5bd8b80e85e3c9ce586635c\",\"lessThan\":\"94617b736c25091b60e514e2e7aeafcbbee6b700\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d7d41682efc25d58b5bd8b80e85e3c9ce586635c\",\"lessThan\":\"da19f35868dfbecfff4f81166c054d2656cb1be4\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d7d41682efc25d58b5bd8b80e85e3c9ce586635c\",\"lessThan\":\"35cc42f04bc49f0656f6840cb7451b3df6049649\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d7d41682efc25d58b5bd8b80e85e3c9ce586635c\",\"lessThan\":\"3673952cf0c6cf81b06c66a0b788abeeb02ff3ae\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/bluetooth/hci_core.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.7\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.7\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.195\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.132\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.53\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.4.16\",\"lessThanOrEqual\":\"6.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.5.3\",\"lessThanOrEqual\":\"6.5.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-01-14T18:57:47.458319Z\",\"id\":\"CVE-2023-53386\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.7\",\"versionEndExcluding\":\"5.10.195\",\"matchCriteriaId\":\"B703A10E-CA08-449A-92B3-F3BE97B168D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.132\",\"matchCriteriaId\":\"5913891D-409A-4EEC-9231-F2EF5A493BC7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.53\",\"matchCriteriaId\":\"B20754AF-3B8C-4574-A70D-EC24933810E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.4.16\",\"matchCriteriaId\":\"C3039EA3-F6CA-43EF-9F17-81A7EC6841EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.5\",\"versionEndExcluding\":\"6.5.3\",\"matchCriteriaId\":\"880C803A-BEAE-4DA0-8A59-AC023F7B4EE3\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/35cc42f04bc49f0656f6840cb7451b3df6049649\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3673952cf0c6cf81b06c66a0b788abeeb02ff3ae\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/942d8cefb022f384d5424f8b90c7878f3f93726f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/94617b736c25091b60e514e2e7aeafcbbee6b700\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/da19f35868dfbecfff4f81166c054d2656cb1be4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-06-29T22:22:26+00:00",
      "cve": "CVE-2023-53386",
      "id": "CVE-2023-53386",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:fixed": "783",
      "product_status:known_affected": "122",
      "product_status:known_not_affected": "104",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: Bluetooth: Fix potential use-after-free when clear keys",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-53386.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-13T23:46:34Z",
      "cve": "CVE-2023-53386",
      "id": "CVE-2023-53386",
      "initial_release_date": "2025-09-18T23:38:22Z",
      "product_status:known_affected": "387",
      "product_status:known_not_affected": "222",
      "product_status:recommended": "536",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-53386",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-53386.json",
      "version": "50"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.8, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-53386\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-01-14T18:57:47.458319Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-416\", \"description\": \"CWE-416 Use After Free\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-01-14T18:57:43.194Z\"}}], \"cna\": {\"title\": \"Bluetooth: Fix potential use-after-free when clear keys\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"d7d41682efc25d58b5bd8b80e85e3c9ce586635c\", \"lessThan\": \"e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"d7d41682efc25d58b5bd8b80e85e3c9ce586635c\", \"lessThan\": \"942d8cefb022f384d5424f8b90c7878f3f93726f\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"d7d41682efc25d58b5bd8b80e85e3c9ce586635c\", \"lessThan\": \"94617b736c25091b60e514e2e7aeafcbbee6b700\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"d7d41682efc25d58b5bd8b80e85e3c9ce586635c\", \"lessThan\": \"da19f35868dfbecfff4f81166c054d2656cb1be4\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"d7d41682efc25d58b5bd8b80e85e3c9ce586635c\", \"lessThan\": \"35cc42f04bc49f0656f6840cb7451b3df6049649\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"d7d41682efc25d58b5bd8b80e85e3c9ce586635c\", \"lessThan\": \"3673952cf0c6cf81b06c66a0b788abeeb02ff3ae\", \"versionType\": \"git\"}], \"programFiles\": [\"net/bluetooth/hci_core.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.7\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"5.7\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"5.10.195\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.132\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.53\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.4.16\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.4.*\"}, {\"status\": \"unaffected\", \"version\": \"6.5.3\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.5.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"net/bluetooth/hci_core.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd\"}, {\"url\": \"https://git.kernel.org/stable/c/942d8cefb022f384d5424f8b90c7878f3f93726f\"}, {\"url\": \"https://git.kernel.org/stable/c/94617b736c25091b60e514e2e7aeafcbbee6b700\"}, {\"url\": \"https://git.kernel.org/stable/c/da19f35868dfbecfff4f81166c054d2656cb1be4\"}, {\"url\": \"https://git.kernel.org/stable/c/35cc42f04bc49f0656f6840cb7451b3df6049649\"}, {\"url\": \"https://git.kernel.org/stable/c/3673952cf0c6cf81b06c66a0b788abeeb02ff3ae\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nBluetooth: Fix potential use-after-free when clear keys\\n\\nSimilar to commit c5d2b6fa26b5 (\\\"Bluetooth: Fix use-after-free in\\nhci_remove_ltk/hci_remove_irk\\\"). We can not access k after kfree_rcu()\\ncall.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.195\", \"versionStartIncluding\": \"5.7\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.132\", \"versionStartIncluding\": \"5.7\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.53\", \"versionStartIncluding\": \"5.7\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.4.16\", \"versionStartIncluding\": \"5.7\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.5.3\", \"versionStartIncluding\": \"5.7\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6\", \"versionStartIncluding\": \"5.7\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-05-11T19:43:56.770Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2023-53386\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-11T19:43:56.770Z\", \"dateReserved\": \"2025-09-17T14:54:09.737Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2025-09-18T13:33:29.897Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2025-AVI-1108

Vulnerability from certfr_avis - Published: 2025-12-12 - Updated: 2025-12-12

De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	IBM	AIX	AIX versions 7.3.x sans le correctif de sécurité 9086sa.251123.epkg.Z
	IBM	QRadar SIEM	QRadar SIEM versions 7.5.x antérieures à 7.5.0 UP14 IF02

References

Title

Publication Time

FKIE_CVE-2023-53386

Vulnerability from fkie_nvd - Published: 2025-09-18 14:15 - Updated: 2026-06-17 06:45

Severity

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

References

URL	Tags
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/35cc42f04bc49f0656f6840cb7451b3df6049649	Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/3673952cf0c6cf81b06c66a0b788abeeb02ff3ae	Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/942d8cefb022f384d5424f8b90c7878f3f93726f	Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/94617b736c25091b60e514e2e7aeafcbbee6b700	Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/da19f35868dfbecfff4f81166c054d2656cb1be4	Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd	Patch

Impacted products

Vendor	Product	Version
linux	linux_kernel	*
linux	linux_kernel	*
linux	linux_kernel	*
linux	linux_kernel	*
linux	linux_kernel	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/hci_core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd",
              "status": "affected",
              "version": "d7d41682efc25d58b5bd8b80e85e3c9ce586635c",
              "versionType": "git"
            },
            {
              "lessThan": "942d8cefb022f384d5424f8b90c7878f3f93726f",
              "status": "affected",
              "version": "d7d41682efc25d58b5bd8b80e85e3c9ce586635c",
              "versionType": "git"
            },
            {
              "lessThan": "94617b736c25091b60e514e2e7aeafcbbee6b700",
              "status": "affected",
              "version": "d7d41682efc25d58b5bd8b80e85e3c9ce586635c",
              "versionType": "git"
            },
            {
              "lessThan": "da19f35868dfbecfff4f81166c054d2656cb1be4",
              "status": "affected",
              "version": "d7d41682efc25d58b5bd8b80e85e3c9ce586635c",
              "versionType": "git"
            },
            {
              "lessThan": "35cc42f04bc49f0656f6840cb7451b3df6049649",
              "status": "affected",
              "version": "d7d41682efc25d58b5bd8b80e85e3c9ce586635c",
              "versionType": "git"
            },
            {
              "lessThan": "3673952cf0c6cf81b06c66a0b788abeeb02ff3ae",
              "status": "affected",
              "version": "d7d41682efc25d58b5bd8b80e85e3c9ce586635c",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/hci_core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.7"
            },
            {
              "lessThan": "5.7",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.195",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.132",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.53",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.*",
              "status": "unaffected",
              "version": "6.4.16",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.5.*",
              "status": "unaffected",
              "version": "6.5.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.6",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B703A10E-CA08-449A-92B3-F3BE97B168D1",
              "versionEndExcluding": "5.10.195",
              "versionStartIncluding": "5.7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5913891D-409A-4EEC-9231-F2EF5A493BC7",
              "versionEndExcluding": "5.15.132",
              "versionStartIncluding": "5.11",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B20754AF-3B8C-4574-A70D-EC24933810E5",
              "versionEndExcluding": "6.1.53",
              "versionStartIncluding": "5.16",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C3039EA3-F6CA-43EF-9F17-81A7EC6841EF",
              "versionEndExcluding": "6.4.16",
              "versionStartIncluding": "6.2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "880C803A-BEAE-4DA0-8A59-AC023F7B4EE3",
              "versionEndExcluding": "6.5.3",
              "versionStartIncluding": "6.5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: Fix potential use-after-free when clear keys\n\nSimilar to commit c5d2b6fa26b5 (\"Bluetooth: Fix use-after-free in\nhci_remove_ltk/hci_remove_irk\"). We can not access k after kfree_rcu()\ncall."
    }
  ],
  "id": "CVE-2023-53386",
  "lastModified": "2026-06-17T06:45:10.717",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-53386",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-01-14T18:57:47.458319Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2025-09-18T14:15:41.660",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/35cc42f04bc49f0656f6840cb7451b3df6049649"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/3673952cf0c6cf81b06c66a0b788abeeb02ff3ae"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/942d8cefb022f384d5424f8b90c7878f3f93726f"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/94617b736c25091b60e514e2e7aeafcbbee6b700"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/da19f35868dfbecfff4f81166c054d2656cb1be4"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "tags": [
        "Patch"
      ],
      "url": "https://git.kernel.org/stable/c/e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-416"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-416"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}

GHSA-M38W-46XG-V336

Vulnerability from github – Published: 2025-09-18 15:30 – Updated: 2025-12-11 18:30

Details

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: Fix potential use-after-free when clear keys

Similar to commit c5d2b6fa26b5 ("Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk"). We can not access k after kfree_rcu() call.

Severity

7.8 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2023-53386"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-416"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-09-18T14:15:41Z",
    "severity": "HIGH"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: Fix potential use-after-free when clear keys\n\nSimilar to commit c5d2b6fa26b5 (\"Bluetooth: Fix use-after-free in\nhci_remove_ltk/hci_remove_irk\"). We can not access k after kfree_rcu()\ncall.",
  "id": "GHSA-m38w-46xg-v336",
  "modified": "2025-12-11T18:30:34Z",
  "published": "2025-09-18T15:30:34Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-53386"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/35cc42f04bc49f0656f6840cb7451b3df6049649"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/3673952cf0c6cf81b06c66a0b788abeeb02ff3ae"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/942d8cefb022f384d5424f8b90c7878f3f93726f"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/94617b736c25091b60e514e2e7aeafcbbee6b700"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/da19f35868dfbecfff4f81166c054d2656cb1be4"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/e87da6a0ac6e631454e7da53a76aa9fe44aaa5dd"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

RHSA-2025:19102

Vulnerability from csaf_redhat - Published: 2025-10-27 09:51 - Updated: 2026-08-05 11:47

Summary

Red Hat Security Advisory: kernel security update

Severity

Moderate

Scope

7 vulnerabilities in this advisory, including CVE-2023-53386.

CVE-2023-53386

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Fixed: 120 products

https://access.redhat.com/errata/RHSA-2025:19102

Open the full advisory

RHSA-2025:19103

Vulnerability from csaf_redhat - Published: 2025-10-27 09:41 - Updated: 2026-08-05 11:47

Summary

Red Hat Security Advisory: kernel-rt security update

Severity

Moderate

Scope

6 vulnerabilities in this advisory, including CVE-2023-53386.

CVE-2023-53386

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Fixed: 30 products

https://access.redhat.com/errata/RHSA-2025:19103

Open the full advisory

RHSA-2025:21051

Vulnerability from csaf_redhat - Published: 2025-11-12 00:40 - Updated: 2026-08-19 21:05

Summary

Red Hat Security Advisory: kernel security update

Severity

Moderate

Scope

16 vulnerabilities in this advisory, including CVE-2023-53386.

CVE-2023-53386

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Fixed: 167 products

https://access.redhat.com/errata/RHSA-2025:21051

Open the full advisory

RHSA-2025:21084

Vulnerability from csaf_redhat - Published: 2025-11-12 05:26 - Updated: 2026-08-04 19:21

Summary

Red Hat Security Advisory: kernel security update

Severity

Moderate

Scope

12 vulnerabilities in this advisory, including CVE-2023-53386.

CVE-2023-53386

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Fixed: 146 products

https://access.redhat.com/errata/RHSA-2025:21084

Open the full advisory

RHSA-2025:21091

Vulnerability from csaf_redhat - Published: 2025-11-12 08:15 - Updated: 2026-08-19 21:05

Summary

Red Hat Security Advisory: kernel security update

Severity

Moderate

Scope

23 vulnerabilities in this advisory, including CVE-2023-53386.

CVE-2023-53386

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Fixed: 134 products

https://access.redhat.com/errata/RHSA-2025:21091

Open the full advisory

RHSA-2025:21128

Vulnerability from csaf_redhat - Published: 2025-11-12 13:52 - Updated: 2026-08-19 21:05

Summary

Red Hat Security Advisory: kernel-rt security update

Severity

Moderate

Scope

16 vulnerabilities in this advisory, including CVE-2023-53386.

CVE-2023-53386

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Fixed: 34 products

https://access.redhat.com/errata/RHSA-2025:21128

Open the full advisory

RHSA-2025:21136

Vulnerability from csaf_redhat - Published: 2025-11-12 15:08 - Updated: 2026-08-19 21:05

Summary

Red Hat Security Advisory: kernel-rt security update

Severity

Moderate

Scope

23 vulnerabilities in this advisory, including CVE-2023-53386.

CVE-2023-53386

7.1 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Fixed: 30 products

https://access.redhat.com/errata/RHSA-2025:21136

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2023-53386 (GCVE-0-2023-53386)

Solutions

Tags

Sightings

Nomenclature

Related by attack behaviour