CVE-2023-52830
CVE-2019-21028
Description
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
INFO
Published Date :
May 21, 2024, 4:15 p.m.
Last Modified :
May 22, 2024, 12:15 p.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
Exploitability Score :
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2023-52830 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2023-52830 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Rejected by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 22, 2024
Action Type Old Value New Value -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 22, 2024
Action Type Old Value New Value Changed Description In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix double free in hci_conn_cleanup syzbot reports a slab use-after-free in hci_conn_hash_flush [1]. After releasing an object using hci_conn_del_sysfs in the hci_conn_cleanup function, releasing the same object again using the hci_dev_put and hci_conn_put functions causes a double free. Here's a simplified flow: hci_conn_del_sysfs: hci_dev_put put_device kobject_put kref_put kobject_release kobject_cleanup kfree_const kfree(name) hci_dev_put: ... kfree(name) hci_conn_put: put_device ... kfree(name) This patch drop the hci_dev_put and hci_conn_put function call in hci_conn_cleanup function, because the object is freed in hci_conn_del_sysfs function. This patch also fixes the refcounting in hci_conn_add_sysfs() and hci_conn_del_sysfs() to take into account device_add() failures. This fixes CVE-2023-28464. Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Removed Reference kernel.org https://git.kernel.org/stable/c/5c53afc766e07098429520b7677eaa164b593451 Removed Reference kernel.org https://git.kernel.org/stable/c/3c4236f1b2a715e878a06599fa8b0cc21f165d28 Removed Reference kernel.org https://git.kernel.org/stable/c/53d61daf35b1bbf3ae06e852ee107aa2f05b3776 Removed Reference kernel.org https://git.kernel.org/stable/c/ba7088769800d9892a7e4f35c3137a5b3e65410b Removed Reference kernel.org https://git.kernel.org/stable/c/87624b1f9b781549e69f92db7ede012a21cec275 Removed Reference kernel.org https://git.kernel.org/stable/c/fc666d1b47518a18519241cae213de1babd4a4ba Removed Reference kernel.org https://git.kernel.org/stable/c/56a4fdde95ed98d864611155f6728983e199e198 Removed Reference kernel.org https://git.kernel.org/stable/c/a85fb91e3d728bdfc80833167e8162cce8bc7004 -
CVE Translated by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 22, 2024
Action Type Old Value New Value Removed Translation Title: kernel de Linux Description: En el kernel de Linux, se resolvió la siguiente vulnerabilidad: Bluetooth: Corrección de doble liberación en hci_conn_cleanup syzbot informa un use after free de slab en hci_conn_hash_flush [1]. Después de liberar un objeto usando hci_conn_del_sysfs en la función hci_conn_cleanup, liberar el mismo objeto nuevamente usando las funciones hci_dev_put y hci_conn_put provoca un double free. Aquí hay un flujo simplificado: hci_conn_del_sysfs: hci_dev_put put_device kobject_put kref_put kobject_release kobject_cleanup kfree_const kfree(name) hci_dev_put: ... kfree(name) hci_conn_put: put_device ... kfree(name) Este parche elimina la llamada a las funciones hci_dev_put y hci_conn_put en hci_con función n_cleanup, porque el objeto se libera en la función hci_conn_del_sysfs. Este parche también corrige el recuento en hci_conn_add_sysfs() y hci_conn_del_sysfs() para tener en cuenta las fallas de device_add(). Esto corrige CVE-2023-28464. -
CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 21, 2024
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix double free in hci_conn_cleanup syzbot reports a slab use-after-free in hci_conn_hash_flush [1]. After releasing an object using hci_conn_del_sysfs in the hci_conn_cleanup function, releasing the same object again using the hci_dev_put and hci_conn_put functions causes a double free. Here's a simplified flow: hci_conn_del_sysfs: hci_dev_put put_device kobject_put kref_put kobject_release kobject_cleanup kfree_const kfree(name) hci_dev_put: ... kfree(name) hci_conn_put: put_device ... kfree(name) This patch drop the hci_dev_put and hci_conn_put function call in hci_conn_cleanup function, because the object is freed in hci_conn_del_sysfs function. This patch also fixes the refcounting in hci_conn_add_sysfs() and hci_conn_del_sysfs() to take into account device_add() failures. This fixes CVE-2023-28464. Added Reference kernel.org https://git.kernel.org/stable/c/5c53afc766e07098429520b7677eaa164b593451 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/3c4236f1b2a715e878a06599fa8b0cc21f165d28 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/53d61daf35b1bbf3ae06e852ee107aa2f05b3776 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/ba7088769800d9892a7e4f35c3137a5b3e65410b [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/87624b1f9b781549e69f92db7ede012a21cec275 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/fc666d1b47518a18519241cae213de1babd4a4ba [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/56a4fdde95ed98d864611155f6728983e199e198 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/a85fb91e3d728bdfc80833167e8162cce8bc7004 [No types assigned]
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2023-52830 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2023-52830
weaknesses.