CVE-2026-43069

Bluetooth: hci_ll: Fix firmware leak on error path

State: Published
Severity: Not scored
Published: May 5, 2026
Updated: May 11, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_ll: Fix firmware leak on error path

Smatch reports:

drivers/bluetooth/hci_ll.c:587 download_firmware() warn: 'fw' from request_firmware() not released on lines: 544.

In download_firmware(), if request_firmware() succeeds but the returned firmware content is invalid (no data or zero size), the function returns without releasing the firmware, resulting in a resource leak.

Fix this by calling release_firmware() before returning when request_firmware() succeeded but the firmware content is invalid.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	371805522f870986144fcd88727a47858e364a2c to before 95e8601af227b2b4390eecf8db6abdb9f6a91f17Affected 371805522f870986144fcd88727a47858e364a2c to before e6d95488c8c964d1df0d3e1db44c958706311e86Affected 371805522f870986144fcd88727a47858e364a2c to before b2dfbf1b5ff192cefd49574b951a4af9ddd32213Affected 371805522f870986144fcd88727a47858e364a2c to before 28904375d54b436a757641fb0331537778c0de5aAffected 371805522f870986144fcd88727a47858e364a2c to before 5213ef54528dd1ac79b846e30d8f72ce092794aaAffected 371805522f870986144fcd88727a47858e364a2c to before 9ecbfd93cd6de6c78cb7fd51fe079e36c7ff074bAffected 371805522f870986144fcd88727a47858e364a2c to before a7803df606a7d22e896b030f619e1d9d20ae0c6bAffected 371805522f870986144fcd88727a47858e364a2c to before 31148a7be723aa9f2e8fbd62424825ab8d577973Affected
LinuxLinux	4.12Affected before 4.12Not affected 5.10.253 through 5.10.Not affected 5.15.203 through 5.15.Not affected 6.1.168 through 6.1.Not affected 6.6.131 through 6.6.Not affected 6.12.80 through 6.12.Not affected 6.18.21 through 6.18.Not affected 6.19.11 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

371805522f870986144fcd88727a47858e364a2c to before 95e8601af227b2b4390eecf8db6abdb9f6a91f17Affected
371805522f870986144fcd88727a47858e364a2c to before e6d95488c8c964d1df0d3e1db44c958706311e86Affected
371805522f870986144fcd88727a47858e364a2c to before b2dfbf1b5ff192cefd49574b951a4af9ddd32213Affected
371805522f870986144fcd88727a47858e364a2c to before 28904375d54b436a757641fb0331537778c0de5aAffected
371805522f870986144fcd88727a47858e364a2c to before 5213ef54528dd1ac79b846e30d8f72ce092794aaAffected
371805522f870986144fcd88727a47858e364a2c to before 9ecbfd93cd6de6c78cb7fd51fe079e36c7ff074bAffected
371805522f870986144fcd88727a47858e364a2c to before a7803df606a7d22e896b030f619e1d9d20ae0c6bAffected
371805522f870986144fcd88727a47858e364a2c to before 31148a7be723aa9f2e8fbd62424825ab8d577973Affected

LinuxLinux

4.12Affected
before 4.12Not affected
5.10.253 through 5.10.*Not affected
5.15.203 through 5.15.*Not affected
6.1.168 through 6.1.*Not affected
6.6.131 through 6.6.*Not affected
6.12.80 through 6.12.*Not affected
6.18.21 through 6.18.*Not affected
6.19.11 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.