CVE-2023-54214: Linux

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix potential user-after-free This fixes all instances of which requires to allocate a buffer calling alloc_skb which may release the chan lock and reacquire later which makes it possible that the chan is disconnected in the meantime.

Affected products

• Linux Linux: from 3.5, before 4.14.308 (fixed in 4.14.308); from 4.15, before 4.19.276 (fixed in 4.19.276); from 4.20, before 5.4.235 (fixed in 5.4.235); from 5.5, before 5.10.173 (fixed in 5.10.173); from 5.11, before 5.15.99 (fixed in 5.15.99); from 5.16, before 6.1.16 (fixed in 6.1.16); …

Published 2025-12-30. Last modified 2026-08-04.