CVE-2023-54120: Linux 2.6.12

Affected technology

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 152f47bd6b995e0e98c85672f6d19894bc287ef2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5f3d214d19899183d4e0cce7552998262112e4ab, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8a99e6200c38b78a45dcd12a6bdc43fdf4dc36be, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f7ec5ca433ceead8d9d78fd2febff094f289441d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0efb276d5848a3accc37c6f41b85e442c4768169, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f6719fd8f409fa1da8dc956e93822d25e1e8b360, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 248af9feca062a4ca9c3f2ccf67056c8a5eb817f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c95930abd687fcd1aa040dc4fe90dff947916460
Linux

Linux · 2.6.12
Linux

Component: Not specified by the source
File: net/bluetooth/hidp/core.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

A attacker could trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.