HighFix available
Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp conn->chan_lock isn't acquired before l2cap_get_chan_by_scid, if l2cap_get_chan_by_scid returns NULL, then 'bad unlock balance' is triggered.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 4.14.316, 4.19.284, 5.10.181, 5.15.113, 5.4.244, 6.1.30, 6.3.4
- CVEs
- CVE-2023-53297
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 4 Nov 2026, 20:54 UTC · Revision 1
Source evidence
Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
core-osv · Original sourcePublished 16 Sept 2025, 08:11 UTC
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp conn->chan_lock isn't acquired before l2cap_get_chan_by_scid, if l2cap_get_chan_by_scid returns NULL, then 'bad unlock balance' is triggered.
osv:CVE-2023-53297
Kernel
Fixed versions: 4.14.316, 4.19.284, 5.4.244, 5.10.181, 5.15.113, 6.1.30, 6.3.4
Complete source record
{
"id": "28fc6bd873848c23374b4ceeaba9ce1f4b581fc9fdbd85341a314b09f9ca04cd",
"url": "https://osv.dev/vulnerability/CVE-2023-53297",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Bluetooth: L2CAP: fix \"bad unlock balance\" in l2cap_disconnect_rsp",
"summary": "In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix \"bad unlock balance\" in l2cap_disconnect_rsp conn->chan_lock isn't acquired before l2cap_get_chan_by_scid, if l2cap_get_chan_by_scid returns NULL, then 'bad unlock balance' is triggered.",
"evidence": "osv:CVE-2023-53297",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.14.316",
"evidence": "/affected/1/ranges"
},
{
"value": "4.19.284",
"evidence": "/affected/1/ranges"
},
{
"value": "5.4.244",
"evidence": "/affected/1/ranges"
},
{
"value": "5.10.181",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.113",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.30",
"evidence": "/affected/1/ranges"
},
{
"value": "6.3.4",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "CVE-2023-53297",
"aliases": [
"CVE-2023-53297"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "f2d38e77aa5f3effc143e7dd24da8acf02925958"
},
{
"fixed": "5f352a56f0e607e6ff539cbf12156bfd8af232be"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "1351551aa9058e07a20a27a158270cf84fcde621"
},
{
"fixed": "6a27762340ad08643de3bc17fe1646ea489ca2e2"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "c02421992505c95c7f3c9ad59ee35e22eac60988"
},
{
"fixed": "2112c4c47d36bc5aba3ddeb9afedce6ae6a67e7d"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "d9ba36c22a7bb09d6bac4cc2f243eff05da53f43"
},
{
"fixed": "55410a9144c76ecda126e6cdec556dfcd8f343b2"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "ac6725a634f7e8c0330610a8527f20c730b61115"
},
{
"fixed": "116b9c002c894097adc2b8684db2d1da4229ed46"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "348d446762e7c70778df8bafbdf3fa0df2123f58"
},
{
"fixed": "fd269a0435f8e9943b7a57c5a59688848d42d449"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "a2a9339e1c9deb7e1e079e12e27a0265aea8421a"
},
{
"fixed": "5134556c9be582793f30695c09d18a26fe1ff2d7"
},
{
"fixed": "25e97f7b1866e6b8503be349eeea44bb52d661ce"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "4.14.313"
},
{
"fixed": "4.14.316"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "4.19.281"
},
{
"fixed": "4.19.284"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "5.4.241"
},
{
"fixed": "5.4.244"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "5.10.178"
},
{
"fixed": "5.10.181"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "5.15.108"
},
{
"fixed": "5.15.113"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "6.1.25"
},
{
"fixed": "6.1.30"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "6.2.12"
},
{
"fixed": "6.3"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "d82a439c3cfdb28aa7e82e2e849c5c4dd9fca284"
}
]
}
],
"versions": [
"v4.14.315",
"v4.14.314",
"v4.14.313",
"v4.19.283",
"v4.19.282",
"v4.19.281",
"v5.4.243",
"v5.4.242",
"v5.4.241",
"v5.10.180",
"v5.10.179",
"v5.10.178",
"v5.15.112",
"v5.15.111",
"v5.15.110",
"v5.15.109",
"v5.15.108",
"v6.1.29",
"v6.1.28",
"v6.1.27",
"v6.1.26",
"v6.1.25",
"v6.2.16",
"v6.2.15",
"v6.2.14",
"v6.2.13",
"v6.2.12"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53297.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.14.316"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.15.0"
},
{
"fixed": "4.19.284"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.20.0"
},
{
"fixed": "5.4.244"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.5.0"
},
{
"fixed": "5.10.181"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.113"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.30"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.3.4"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53297.json"
}
}
],
"modified": "2026-10-28T02:30:39.848035888Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/116b9c002c894097adc2b8684db2d1da4229ed46",
"https://git.kernel.org/stable/c/2112c4c47d36bc5aba3ddeb9afedce6ae6a67e7d",
"https://git.kernel.org/stable/c/25e97f7b1866e6b8503be349eeea44bb52d661ce",
"https://git.kernel.org/stable/c/5134556c9be582793f30695c09d18a26fe1ff2d7",
"https://git.kernel.org/stable/c/55410a9144c76ecda126e6cdec556dfcd8f343b2",
"https://git.kernel.org/stable/c/5f352a56f0e607e6ff539cbf12156bfd8af232be",
"https://git.kernel.org/stable/c/6a27762340ad08643de3bc17fe1646ea489ca2e2",
"https://git.kernel.org/stable/c/fd269a0435f8e9943b7a57c5a59688848d42d449",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53297.json",
"https://nvd.nist.gov/vuln/detail/CVE-2023-53297",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53297.json"
}
},
"related_cves": [
{
"value": "CVE-2023-53297",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 506918,
"published_at": "2025-09-16T08:11:29.283+00:00"
}