Global Out-of-Bounds Access Vulnerability in Linux Kernel Bluetooth Module
Summary
CVE-2023-53057: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HCI: Fix global-out-of-bounds To loop a variable-length array, hci_init_stage_sync(stage) considers that stage[i] is valid as long as stage[i... Affects linux versions < 6.1.25-1. Fixed in 6.1.25-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services and managing hardware resources. It supports a wide range of functionalities, including networking, file systems, and device management. The Bluetooth module within the kernel facilitates wireless communication between devices. This vulnerability affects the Bluetooth HCI (Host Controller Interface) implementation, specifically in the handling of variable-length arrays, which can lead to security risks.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the Bluetooth HCI implementation, where the function hci_init_stage_sync does not properly validate the last element of variable-length arrays. This oversight allows the function to access memory beyond the allocated range, leading to a global out-of-bounds read. The issue arises from the absence of an intentionally invalid element in the amp_init1 and amp_init2 arrays, which can result in unauthorized memory access and potential exploitation by attackers. The vulnerability has been assigned the identifier CVE-2023-53057.
How To Fix
Minimum fixed version
6.1.25-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it is available.
Conclusion
The CVE-2023-53057 vulnerability in the Linux kernel's Bluetooth module poses a significant risk due to global out-of-bounds memory access. Users are strongly advised to update their kernel to the patched version to protect their systems from potential exploitation. Regular monitoring for vulnerabilities using tools like Vulert can help maintain software security.
See every vulnerability recorded for linux →
FAQ
CVE-2023-53057 is a vulnerability in the Linux kernel's Bluetooth module that allows for global out-of-bounds memory access.
This vulnerability can lead to unauthorized memory access, potentially allowing attackers to exploit the system or crash the Bluetooth service.
If you are using Debian 12 or 13 with a kernel version prior to 6.1.25-1, your system may be affected by this vulnerability.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
While there are no specific workarounds, it is crucial to prioritize updating your kernel to mitigate the risk associated with this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
