Riskcovery

CVE-2026-53364

Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate()

State
Published
Severity
Not scored
Published
Jul 13, 2026
Updated
Aug 3, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate()

hci_le_big_terminate() allocates iso_list_data via kzalloc_obj but returns 0 without freeing it when neither pa_sync_term nor big_sync_term flags are set after evaluating the PA and BIG sync connection state.

This early-return path was introduced when hci_le_big_terminate() was refactored to take struct hci_conn instead of raw u8 parameters, adding PA/BIG flag evaluation logic. The existing kfree() on hci_cmd_sync_queue failure does not cover this path.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a8444cca514edd4e47e322926b10516a5a6d7016 to before 488e808e3fa53200f3ef3324c45fcba4ae9f4972Affected
  • a7bcffc673de219af2698fbb90627016233de67b to before e6b78019664dfe37c3dc707f50e7b453d6c7726dAffected
  • a7bcffc673de219af2698fbb90627016233de67b to before a59d4f4217e6200ca9180643e5738a87d3fa8be0Affected
  • a7bcffc673de219af2698fbb90627016233de67b to before bfa9d28960ed677d556bdf097073bc3129686229Affected
  • 087812a6119b4cd5c9d658b48aee40a25707a1c6Affected
  • 6.16.4 to before 6.17Affected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.18.35 through 6.18.*Not affected
  • 7.0.12 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.