SECUFOCUSNOW
Home›CVE index›CVE-2023-54120
Review reviewHigh

CVE-2023-54120

Linux

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix race condition in hidp_session_thread There is a potential race condition in hidp_session_thread that may lead to use-after-free. For instance, the timer is active while hidp_del_timer is called in hidp_session_thread(). After hidp_session_put, then 'session' will be freed, causing kernel panic when hidp_idle_timeout is running. The solution is to use del_timer_sync instead of del_timer. Here is the call trace: ? hidp_session_probe+0x780/0x780 call_timer_fn+0x2d/0x1e0 __run_timers.part.0+0x569/0x940 hidp_sess...

CVSS
8.8
EPSS
0.29%
20.9% percentile
CISA KEV
Not listed
Published
2025.12.24
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.29%
Technical severityCVSS 8.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix race condition in hidp_session_thread There is a potential race condition in hidp_session_thread that may lead to use-after-free. For instance, the timer is active while hidp_del_timer is called in hidp_session_thread(). After hidp_session_put, then 'session' will be freed, causing kernel panic when hidp_idle_timeout is running. The solution is to use del_timer_sync instead of del_timer. Here is the call trace: ? hidp_session_probe+0x780/0x780 call_timer_fn+0x2d/0x1e0 __run_timers.part.0+0x569/0x940 hidp_sess...

Affected product and versions

Product
Linux
Affected versions
>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 152f47bd6b995e0e98c85672f6d19894bc287ef2, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 5f3d214d19899183d4e0cce7552998262112e4ab, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 8a99e6200c38b78a45dcd12a6bdc43fdf4dc36be, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < f7ec5ca433ceead8d9d78fd2febff094f289441d, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 0efb276d5848a3accc37c6f41b85e442c4768169, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < f6719fd8f409fa1da8dc956e93822d25e1e8b360, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 248af9feca062a4ca9c3f2ccf67056c8a5eb817f, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c95930abd687fcd1aa040dc4fe90dff947916460, >= 2.6.12
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE
Not available
CVE-2023-54120 — Linux | SECUFOCUS NOW