CVE-2023-1901

🗓️ 10 Jul 2023 04:37:33Reported by zephyrType

The bluetooth HCI host layer logic not clearing a global reference to a semaphore after synchronously sending HCI commands may allow a malicious HCI Controller to cause the use of a dangling reference in the host layer, leading to a crash (DoS) or potential RCE on the Host layer

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the Zephyr real-time operating system’s Bluetooth protocol allows a intruder to trigger a service failure or execute arbitrary code.	7 Aug 202300:00	–	bdu_fstec
CNNVD	Zephyr 缓冲区错误漏洞	10 Jul 202300:00	–	cnnvd
Cvelist	CVE-2023-1901 HCI send_sync Dangling Semaphore Reference Re-use	10 Jul 202304:37	–	cvelist
EUVD	EUVD-2023-24090	3 Oct 202520:07	–	euvd
NVD	CVE-2023-1901	10 Jul 202316:15	–	nvd
OSV	CVE-2023-1901	10 Jul 202316:15	–	osv
Prion	Command injection	10 Jul 202316:15	–	prion
Positive Technologies	PT-2023-4150 · Zephyr · Zephyr	10 Jul 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-1901	23 May 202505:04	–	redhatcve
Vulnrichment	CVE-2023-1901 HCI send_sync Dangling Semaphore Reference Re-use	10 Jul 202304:37	–	vulnrichment

NVD

Node

zephyrproject zephyrRange≤3.3.0

[
  {
    "defaultStatus": "unaffected",
    "packageName": "Zephyr",
    "product": "Zephyr",
    "repo": "https://github.com/zephyrproject-rtos/zephyr",
    "vendor": "zephyrproject-rtos",
    "versions": [
      {
        "lessThanOrEqual": "3.3",
        "status": "affected",
        "version": "*",
        "versionType": "git"
      }
    ]
  }
]

Source	Link
github	www.github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-xvvm-8mcm-9cq3

17 Jun 2026 05:28Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.15.9 - 8

EPSS0.00513

SSVC