{"id":"CVE-2023-7356","kind":"vulnerability","aliases":["CVE-2023-7356"],"related":[],"title":"Linux kernel: Bluetooth ISO service data copy flaw, impact unclear","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID\n\nCopy the content of a Periodic Advertisement Report to BASE only if\nthe service UUID is Basic Audio Announcement Service UUID.","summary":"The Linux kernel's Bluetooth ISO code copied Periodic Advertisement Report content into the BASE buffer without first checking the service UUID, and the fix limits the copy to Basic Audio Announcement Service data. The sources do not describe a concrete attacker outcome.","severity":"unknown","cvss":null,"epss":0.00166,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["bluetooth","embedded","infrastructure","kernel","linux"],"not_affected_if":["bluetooth-module-disabled","no-bluetooth-hardware"],"how_to_check":"- Run `uname -r` and compare against the kernel version that carries the upstream fix for CVE-2023-7356\n- Check whether Bluetooth LE Audio (ISO) support is loaded with `lsmod | grep bluetooth`","fix":"- Update the Linux kernel to a stable release that includes the upstream fix for CVE-2023-7356 (exact version unknown from sources)","status":"open","published_at":"2026-10-21T15:17:12+00:00","first_seen_at":"2026-10-23T21:57:28+00:00","triaged_at":"2026-10-25T05:02:12+00:00","updated_at":"2026-10-25T05:02:12+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-10-25T05:02:12Z","model":"claude-haiku-5-5","output":{"fix":"- Update the Linux kernel to a stable release that includes the upstream fix for CVE-2023-7356 (exact version unknown from sources)","reach":"local","title":"Linux kernel: Bluetooth ISO service data copy flaw, impact unclear","impact":"low","summary":"The Linux kernel's Bluetooth ISO code copied Periodic Advertisement Report content into the BASE buffer without first checking the service UUID, and the fix limits the copy to Basic Audio Announcement Service data. The sources do not describe a concrete attacker outcome.","category":"infrastructure","nicknames":[],"who_cares":["linux","kernel","bluetooth","embedded"],"confidence":0.4,"needs_auth":"unknown","worst_case":"unknown; sources do not describe the memory-safety outcome","analyst_note":"Check the NVD entry and the upstream kernel commit to confirm the affected versions and whether the flaw causes a crash, memory corruption or info leak; EPSS is low at 0.002.","how_to_check":"- Run `uname -r` and compare against the kernel version that carries the upstream fix for CVE-2023-7356\n- Check whether Bluetooth LE Audio (ISO) support is loaded with `lsmod | grep bluetooth`","needs_analyst":true,"not_affected_if":["no-bluetooth-hardware","bluetooth-module-disabled"],"who_is_affected":"Machines running a Linux kernel with Bluetooth ISO support, typically desktops, laptops or embedded devices that use LE Audio. Servers and systems without Bluetooth hardware or with the Bluetooth module disabled are unlikely to be exposed. The sources do not state the exact affected version range.","user_interaction":"unknown","needs_special_setup":"yes","severity_if_unknown":"unknown"},"cost_usd":0.000653,"input_tokens":3365,"output_tokens":633,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2023':12A,15A '-7356':13A,16A 'advertis':31B,93C 'announc':53B,105C 'attack':63B 'audio':52B,104C 'baa':84C 'base':36B,78C,96C 'basic':51B,103C 'bluetooth':3A,17B,26B,75C 'buffer':37B 'check':40B 'code':28B 'concret':62B 'content':33B,89C 'copi':7A,29B,49B,77C,87C 'cve':11A,14A 'data':6A,55B,81C 'describ':60B 'eir':83C 'embed':18B 'first':39B 'fix':46B 'flaw':8A 'follow':70C 'impact':9A 'infrastructur':19B 'iso':4A,27B,76C 'kernel':2A,20B,24B,68C 'limit':47B 'linux':1A,21B,23B,67C 'match':82C 'outcom':64B 'period':30B,92C 'report':32B,94C 'resolv':74C 'servic':5A,42B,54B,80C,85C,100C,106C 'sourc':57B 'unclear':10A 'uuid':43B,86C,101C,107C 'vulner':71C 'without':38B","nicknames":[],"mitigations":[],"who_affected":"Machines running a Linux kernel with Bluetooth ISO support, typically desktops, laptops or embedded devices that use LE Audio. Servers and systems without Bluetooth hardware or with the Bluetooth module disabled are unlikely to be exposed. The sources do not state the exact affected version range.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-21T15:17:12+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2023-7356","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-7356","severity":null,"published_at":"2026-10-21T15:17:12+00:00","modified_at":"2026-10-21T15:17:12+00:00","first_seen_at":"2026-10-23T21:57:28+00:00","fetched_at":"2026-10-23T22:29:01+00:00","note":null},{"source":"epss","external_id":"CVE-2023-7356","url":"https://api.first.org/data/v1/epss?cve=CVE-2023-7356","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T13:15:54+00:00","fetched_at":"2026-10-24T13:15:54+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}