CVE-2026-53364
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2026-07-13
Modified: 2026-11-06
First seen: 2026-11-06
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate() hci_le_big_terminate() allocates iso_list_data via kzalloc_obj but returns 0 without freeing it when neither pa_sync_term nor big_sync_term flags are set after evaluating the PA and BIG sync connection state. This early-return path was introduced when hci_le_big_terminate() was refactored to take struct hci_conn instead of raw u8 parameters, adding PA/BIG flag evaluation logic. The existing kfree() on hci_cmd_sync_queue failure does not cover this path.
Weakness Classification (1)
Affected Software (13)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | a8444cca514edd4e47e322926b10516a5a6d7016 < 488e808e3fa53200f3ef3324c45fcba4ae9f4972 |
| Linux | Linux | a7bcffc673de219af2698fbb90627016233de67b < e6b78019664dfe37c3dc707f50e7b453d6c7726d |
| Linux | Linux | a7bcffc673de219af2698fbb90627016233de67b < a59d4f4217e6200ca9180643e5738a87d3fa8be0 |
| Linux | Linux | a7bcffc673de219af2698fbb90627016233de67b < bfa9d28960ed677d556bdf097073bc3129686229 |
| Linux | Linux | 087812a6119b4cd5c9d658b48aee40a25707a1c6 |
| Linux | Linux | 6.16.4 < 6.17 |
| Linux | Linux | 6.17 |
| linux | linux_kernel | 6.16.4 – 6.18.35 |
| linux | linux_kernel | 7.1 |
| linux | linux_kernel | 7.1 |
| linux | linux_kernel | 7.1 |
| linux | linux_kernel | 7.1 |
| linux | linux_kernel | 7.1 |