A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. A call to btsdio_remove with an unfinished job may cause a race problem which leads to a UAF on hdev devices.Referenceshttps://access.redhat.com/errata/RHSA-2023:6583https://access.redhat.com/errata/RHSA-2023:6901https://access.redhat.com/errata/RHSA-2023:7077https://access.redhat.com/errata/RHSA-2024:0724https://access.redhat.com/errata/RHSA-2024:4740https://access.redhat.com/security/cve/CVE-2023-1989https://bugzilla.redhat.com/show_bug.cgi?id=2185945https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next.git/commit/?id=f132c2d13088
