Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Back

CVE-2023-54038Bluetooth: hci_conn: return ERR_PTR instead of NULL when there is no link

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: return ERR_PTR instead of NULL when there is no link hci_connect_sco currently returns NULL when there is no link (i.e. when hci_conn_link() returns NULL). sco_connect() expects an ERR_PTR in case of any error (see line 266 in sco.c). Thus, hcon set as NULL passes through to sco_conn_add(), which tries to get hcon->hdev, resulting in dereferencing a NULL pointer as reported by syzkaller. The same issue exists for iso_connect_cis() calling hci_connect_cis(). Thus, make hci_connect_sco() and hci_connect_cis() return ERR_PTR instead of NULL.

Timeline

  1. ID reserved

    By Linux

  2. Published

  3. · 5 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Deferred.

EPSS (exploitation in 30 days)
0.18% · top 92% of all CVEs (12 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.

Affected products

  • Linux · Linux

    • affected 06149746e7203d5ffe2d6faf9799ee36203aa8b8 – < 357ab53c83a5322437fa434e9a9e3e0bafe6b383
    • affected 06149746e7203d5ffe2d6faf9799ee36203aa8b8 – < b4066eb04bb67e7ff66e5aaab0db4a753f37eaad
    • affected f72fc94a17d45be98aecfd59c39b5b24a6a342e2
    • affected 6.3.8 – < 6.4

  • Linux · Linux

    • affected 6.4
    • unaffected < 6.4
    • unaffected 6.4.7 – ≤ 6.4.*
    • unaffected 6.5 – ≤ *

References

References2

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2023-54038 badge
[![CVE-2023-54038](https://cveledger.app/badge/CVE-2023-54038.svg)](https://cveledger.app/cve/CVE-2023-54038)

Record last updated .