8.8

CVE-2023-54214: linux

CVSS: 8.8v3.1HighDeferred
AliasesUBUNTU-CVE-2023-54214DEBIAN-CVE-2023-54214
Published 30-12-2025Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2023-54214 is a high (CVSS 8.8) vulnerability in linux. EPSS estimates a 0.30% chance of exploitation in the next 30 days, higher than 21.3% of scored vulnerabilities.

Overall risk
35/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.30%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 8 · Related 5
RHSA-2024:2394RHSA-2026:70402RHSA-2026:70403SUSE-SU-2026:0263-1SUSE-SU-2026:0316-1SUSE-SU-2026:0317-1

Timeline

  1. 30-12-2025
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix potential user-after-free This fixes all instances of which requires to allocate a buffer calling alloc_skb which may release the chan lock and reacquire later which makes it possible that the chan is disconnected in the meantime.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.30%

Chance of exploitation in the next 30 days

Percentile

21%

Versus all other CVEs

30-day change

+0.01 pp

From 0.29% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.30%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu122 products
  • linuxAll versions (No fix recorded) | < 5.4.0-152.169 | < 5.15.0-75.82
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.4.0-1104.112 | < 5.15.0-1038.43
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linux< 6.1.20-1
Linux1 product
  • linux≥ a6a5568c03c4805d4d250f6bd9d468eeeb4ea059, < b2fde8cb2a25125111f2144604e0e7c0ebcc4bba | ≥ a6a5568c03c4805d4d250f6bd9d468eeeb4ea059, < a6a7d1541fefddf7ca0cfb34c1bff63ff809cc49 | ≥ a6a5568c03c4805d4d250f6bd9d468eeeb4ea059, < 60aaccf16d1e099c16bebfb96428ae762cb528f7 | ≥ a6a5568c03c4805d4d250f6bd9d468eeeb4ea059, < b8ed41cc04fb74005aa51d17865ca3d022760335 | ≥ a6a5568c03c4805d4d250f6bd9d468eeeb4ea059, < 31a288a4df7f6a28e65da22a4ab2add4a963738e | ≥ a6a5568c03c4805d4d250f6bd9d468eeeb4ea059, < 64e28ecf44e46de9f01915a4146706a21c3469d2 | ≥ a6a5568c03c4805d4d250f6bd9d468eeeb4ea059, < 994e3e18908f5c4a12d07b44018e6aa85f071048 | ≥ a6a5568c03c4805d4d250f6bd9d468eeeb4ea059, < df5703348813235874d851934e957c3723d71644 | 3.5

3 vendors · 124 products

References

12 links
Show all 12 references