In the Linux kernel, the following vulnerability has been resolved:

Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work"

This reverts commit 1e9ac114c4428fdb7ff4635b45d4f46017e8916f.

This patch introduces a possible null-ptr-def problem. Revert it. And the
fixed bug by this patch have resolved by commit 73f7b171b7c0 ("Bluetooth:
btsdio: fix use after free bug in btsdio_remove due to race condition").

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00047.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
95eacef5692545f199fae4e52abfbfa273acb351 affected < 3b4ed52009723f7dfca7a8ca95163bfb441bfb76
af4d48754d5517d33bac5e504ff1f1de0808e29e affected < 70a104588e3131415e559c06deb834ce259a285a
a18fb433ceb56e0787546a9d77056dd0f215e762 affected < de0ffb5145c9f418ad76f00e58d4b91c680410b2
da3d3fdfb4d523c5da30e35a8dd90e04f0fd8962 affected < 0837d10f6c37a47a0c73bccf1e39513613a2fcc2
8efae2112d910d8e5166dd0a836791b08721eef1 affected < a789192f366147a0fbb395650079906d1d04e0b9
cbf8deacb7053ce3e3fed64b277c6c6989e65bba affected < 952030c914b5f2288609efe868537afcff7a3f51
c59c65a14e8f7d738429648833f3bb3f9df0513f affected < 8f83fa62614c282dd5d1211a0dd99c6a0a515b81
1e9ac114c4428fdb7ff4635b45d4f46017e8916f affected < d8d7ce037d9a8f1f0714ece268c4c2c50845bbc3
1e9ac114c4428fdb7ff4635b45d4f46017e8916f affected < db2bf510bd5d57f064d9e1db395ed86a08320c54
Linux Linux affected
Version Status Constraints
6.3 affected —
0 unaffected < 6.3
4.14.315 unaffected ≤ 4.14.*
4.19.283 unaffected ≤ 4.19.*
5.4.243 unaffected ≤ 5.4.*
5.10.180 unaffected ≤ 5.10.*
5.15.111 unaffected ≤ 5.15.*
6.1.28 unaffected ≤ 6.1.*
6.2.15 unaffected ≤ 6.2.*
6.3.2 unaffected ≤ 6.3.*
6.4 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0837d10f6c37a47a0c73bccf1e39513613a2fcc2 cve-icon cve-icon
https://git.kernel.org/stable/c/3b4ed52009723f7dfca7a8ca95163bfb441bfb76 cve-icon cve-icon
https://git.kernel.org/stable/c/70a104588e3131415e559c06deb834ce259a285a cve-icon cve-icon
https://git.kernel.org/stable/c/8f83fa62614c282dd5d1211a0dd99c6a0a515b81 cve-icon cve-icon
https://git.kernel.org/stable/c/952030c914b5f2288609efe868537afcff7a3f51 cve-icon cve-icon
https://git.kernel.org/stable/c/a789192f366147a0fbb395650079906d1d04e0b9 cve-icon cve-icon
https://git.kernel.org/stable/c/d8d7ce037d9a8f1f0714ece268c4c2c50845bbc3 cve-icon cve-icon
https://git.kernel.org/stable/c/db2bf510bd5d57f064d9e1db395ed86a08320c54 cve-icon cve-icon
https://git.kernel.org/stable/c/de0ffb5145c9f418ad76f00e58d4b91c680410b2 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025123029-CVE-2023-54197-aeec@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-54197 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-54197 cve-icon
History

Wed, 31 Dec 2025 12:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Tue, 30 Dec 2025 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" This reverts commit 1e9ac114c4428fdb7ff4635b45d4f46017e8916f. This patch introduces a possible null-ptr-def problem. Revert it. And the fixed bug by this patch have resolved by commit 73f7b171b7c0 ("Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition").
Title Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work"
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-30T12:09:03.472Z

Reserved: 2025-12-30T12:06:44.498Z

Link: CVE-2023-54197

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-12-30T13:16:07.767

Modified: 2025-12-31T20:43:05.160

Link: CVE-2023-54197

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-12-30T00:00:00Z

Links: CVE-2023-54197 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.