IT

Tracker / CVE-2026-53252

CVE-2026-53252

Medium 5.5

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix memory leak in error path of hci_alloc_dev() Early failures in Bluetooth HCI UART configuration leak SRCU percpu memory. When device initialization fails before hci_register_dev() completes, the HCI_UNREGISTER flag is never set. As a result, when the device reference count reaches zero, bt_host_release() evaluates this flag as false and falls back to a direct kfree(hdev). Because hci_release_dev() is bypassed, the SRCU struct initialized early in hci_alloc_dev() is never cleaned up, resulting in a leak of percpu memory. Fix the leak by explicitly calling cleanup_srcu_struct() in the fallback (unregistered) branch of bt_host_release() before freeing the device.

Affected products and versions

linux linux_kernel
linux linux_kernel · 5.10.259 → 5.11
linux linux_kernel · 6.1.167 → 6.1.176
linux linux_kernel · 6.12.36 → 6.12.94
linux linux_kernel · 6.15.5 → 6.16
linux linux_kernel · 6.16.1 → 6.18.36
linux linux_kernel · 6.19 → 7.0.13
linux linux_kernel · 6.6.97 → 6.6.143

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References