In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: L2CAP: Fix potential user-after-free

This fixes all instances of which requires to allocate a buffer calling
alloc_skb which may release the chan lock and reacquire later which
makes it possible that the chan is disconnected in the meantime.

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00035.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
a6a5568c03c4805d4d250f6bd9d468eeeb4ea059 affected < b2fde8cb2a25125111f2144604e0e7c0ebcc4bba
a6a5568c03c4805d4d250f6bd9d468eeeb4ea059 affected < a6a7d1541fefddf7ca0cfb34c1bff63ff809cc49
a6a5568c03c4805d4d250f6bd9d468eeeb4ea059 affected < 60aaccf16d1e099c16bebfb96428ae762cb528f7
a6a5568c03c4805d4d250f6bd9d468eeeb4ea059 affected < b8ed41cc04fb74005aa51d17865ca3d022760335
a6a5568c03c4805d4d250f6bd9d468eeeb4ea059 affected < 31a288a4df7f6a28e65da22a4ab2add4a963738e
a6a5568c03c4805d4d250f6bd9d468eeeb4ea059 affected < 64e28ecf44e46de9f01915a4146706a21c3469d2
a6a5568c03c4805d4d250f6bd9d468eeeb4ea059 affected < 994e3e18908f5c4a12d07b44018e6aa85f071048
a6a5568c03c4805d4d250f6bd9d468eeeb4ea059 affected < df5703348813235874d851934e957c3723d71644
Linux Linux affected
Version Status Constraints
3.5 affected —
0 unaffected < 3.5
4.14.308 unaffected ≤ 4.14.*
4.19.276 unaffected ≤ 4.19.*
5.4.235 unaffected ≤ 5.4.*
5.10.173 unaffected ≤ 5.10.*
5.15.99 unaffected ≤ 5.15.*
6.1.16 unaffected ≤ 6.1.*
6.2.3 unaffected ≤ 6.2.*
6.3 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/31a288a4df7f6a28e65da22a4ab2add4a963738e cve-icon cve-icon
https://git.kernel.org/stable/c/60aaccf16d1e099c16bebfb96428ae762cb528f7 cve-icon cve-icon
https://git.kernel.org/stable/c/64e28ecf44e46de9f01915a4146706a21c3469d2 cve-icon cve-icon
https://git.kernel.org/stable/c/994e3e18908f5c4a12d07b44018e6aa85f071048 cve-icon cve-icon
https://git.kernel.org/stable/c/a6a7d1541fefddf7ca0cfb34c1bff63ff809cc49 cve-icon cve-icon
https://git.kernel.org/stable/c/b2fde8cb2a25125111f2144604e0e7c0ebcc4bba cve-icon cve-icon
https://git.kernel.org/stable/c/b8ed41cc04fb74005aa51d17865ca3d022760335 cve-icon cve-icon
https://git.kernel.org/stable/c/df5703348813235874d851934e957c3723d71644 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025123025-CVE-2023-54214-c4a6@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-54214 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-54214 cve-icon
History

Thu, 01 Jan 2026 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Important

Tue, 30 Dec 2025 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix potential user-after-free This fixes all instances of which requires to allocate a buffer calling alloc_skb which may release the chan lock and reacquire later which makes it possible that the chan is disconnected in the meantime.
Title Bluetooth: L2CAP: Fix potential user-after-free
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-30T12:11:11.383Z

Reserved: 2025-12-30T12:06:44.500Z

Link: CVE-2023-54214

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-12-30T13:16:09.633

Modified: 2025-12-31T20:42:43.210

Link: CVE-2023-54214

cve-icon Redhat

Severity : Important

Publid Date: 2025-12-30T00:00:00Z

Links: CVE-2023-54214 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.