Riskcovery

CVE-2026-53251

Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync

State
Published
Severity
Not scored
Published
Jun 25, 2026
Updated
Jun 25, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync

hci_get_route() returns a reference-counted hci_dev pointer via hci_dev_hold(). The function exits normally or with an error without ever releasing it.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 1360e5b6ce63d63d23223a659ca2bbafa30a53aa to before 4bbec25f47b930101294fd310c627c3f53e9661fAffected
  • 07a9342b94a91b306ed1cf6aa8254aea210764c9 to before 33d677d2e3713d98012c3dbd4a9207f7d785b854Affected
  • 07a9342b94a91b306ed1cf6aa8254aea210764c9 to before 23e8eb16820b866528fb300dc67fe3f67f00ef62Affected
  • 07a9342b94a91b306ed1cf6aa8254aea210764c9 to before 5cbf290b79351971f20c7a533247e8d58a3f970cAffected
  • bfec1e55314896bf4a4cfdb3a9ad4872be9f06edAffected
  • 6.12.2 to before 6.12.94Affected
  • 6.11.11 to before 6.12Affected
LinuxLinux
  • 6.13Affected
  • before 6.13Not affected
  • 6.12.94 through 6.12.*Not affected
  • 6.18.36 through 6.18.*Not affected
  • 7.0.13 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.