{
  "cveId": "CVE-2023-52518",
  "url": "https://patchblox.com/security/cve/CVE-2023-52518",
  "summary": "CVE-2023-52518 is fixed in linux on 1 platform, first by DEBIAN-CVE-2023-52518, released March 2, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: hci_codec: Fix leaking content of loc...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: hci_codec: Fix leaking content of local_codecs  The following memory leak can be observed when the controller supports codecs which are stored in local_codecs list but the elements are never freed:  unreferenced object 0xffff88800221d840 (size 32):   comm \u0022kworker/u3:0\u0022, pid 36, jiffies 4294898739 (age 127.060s)   hex dump (first 32 bytes):     f8 d3 02 03 80 88 ff ff 80 d8 21 02 80 88 ff ff  ..........!.....     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................   backtrace:     [\u003Cffffffffb324f557\u003E] __kmalloc\u002B0x47/0x120     [\u003Cffffffffb39ef37d\u003E] hci_codec_list_add.isra.0\u002B0x2d/0x160     [\u003Cffffffffb39ef643\u003E] hci_read_codec_capabilities\u002B0x183/0x270     [\u003Cffffffffb39ef9ab\u003E] hci_read_supported_codecs\u002B0x1bb/0x2d0     [\u003Cffffffffb39f162e\u003E] hci_read_local_codecs_sync\u002B0x3e/0x60     [\u003Cffffffffb39ff1b3\u003E] hci_dev_open_sync\u002B0x943/0x11e0     [\u003Cffffffffb396d55d\u003E] hci_power_on\u002B0x10d/0x3f0     [\u003Cffffffffb30c99b4\u003E] process_one_work\u002B0x404/0x800     [\u003Cffffffffb30ca134\u003E] worker_thread\u002B0x374/0x670     [\u003Cffffffffb30d9108\u003E] kthread\u002B0x188/0x1c0     [\u003Cffffffffb304db6b\u003E] ret_from_fork\u002B0x2b/0x50     [\u003Cffffffffb300206a\u003E] ret_from_fork_asm\u002B0x1a/0x30",
  "published": "2024-03-02T22:15:47Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00238,
  "epssPercentile": 0.1499,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.64-1",
      "fix": "DEBIAN-CVE-2023-52518",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-52518",
      "released": "2024-03-02T22:15:47Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.5.8-1",
      "fix": "DEBIAN-CVE-2023-52518",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-52518",
      "released": "2024-03-02T22:15:47Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.5.8-1",
      "fix": "DEBIAN-CVE-2023-52518",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-52518",
      "released": "2024-03-02T22:15:47Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T13:31:49Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}