CVE-2023-1989
CVE-2023-1989: 2 tracked advisory records across NetApp, Red Hat. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
NetApp
1 advisory- Advisory severityHigh7.0
High [CVE-2023-1989] Kernel: use after free bug in btsdio_remove due to race condition
CVE-2023-1989Source published Source updated
A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. A call to btsdio_remove with an unfinished job may cause a race problem which leads to a UAF on hdev devices. Affected product named by the advisory: hci_baseboard_management_controller.
- Affected products in this advisory
- hci_baseboard_management_controller
- Source-reported affected versions
- 2.6.24 before 4.14.326
- 4.15 before 4.19.295
- 4.20 before 5.4.257
- 5.5 before 5.10.195
3 more entries in the full advisory.
- Source-reported fixed versions
- 4.14.326
- 4.19.295
- 5.4.257
- 5.10.195
3 more entries in the full advisory.
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
Red Hat
1 advisory- Advisory severityHigh7.0
High [CVE-2023-1989] Kernel: use after free bug in btsdio_remove due to race condition
CVE-2023-1989Source published Source updated
A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. In this flaw, a call to btsdio_remove with an unfinished job, may cause a race problem leading to a UAF on hdev devices. Because successful exploitation of this flaw requires that a system supports SDIO hardware and that an attacker has control over attaching and detaching that hardware, Red Hat assesses the impact of this vulnerability as Moderate. Red Hat severity: Moderate — CVSS 7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Weakness: CWE-416. Affected Red Hat products: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 8.6 Extended Update Support; Red Hat Enterprise Linux 8.8 Extended Update Support; Red Hat Enterprise Linux 9; Red Hat Virtualization 4 for Red Hat Enterprise…
- Affected products in this advisory
- Red Hat Enterprise Linux 8.6 Extended Update Support
- Red Hat Enterprise Linux 8.8 Extended Update Support
- Red Hat Enterprise Linux 9
- Red Hat Virtualization 4 for Red Hat Enterprise Linux 8
3 more entries in the full advisory.
- Source-reported affected versions
- Affected-version details not available in this record.
- Source-reported fixed versions
- kernel-rt-0:4.18.0-513.5.1.rt7.307.el8_9
- kernel-0:4.18.0-513.5.1.el8_9
- kernel-0:4.18.0-372.91.1.el8_6
- kernel-0:4.18.0-477.64.1.el8_8
6 more entries in the full advisory.
- Mitigation guidance
- This flaw can be mitigated by preventing the affected Generic Bluetooth SDIO driver kernel module from loading during the boot time. Ensure the module is added into the blacklist file. ~~~ Refer: How do I blacklist a kernel module to prevent it from loading automatically? https://access.redhat.com/solutions/41278 ~~~
Android app · Google Play
Turn CVE research into alerts on your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.