Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-53209

Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend Existing advertising instances can already hold the maximum extended advertising payload. When hci_adv_bcast_annoucement() prepends the Broadcast Announcement service data to that payload, the combined data may no longer fit in the temporary buffer used to rebuild the advertising data. Reject that case before copying the existing payload and report the failure through the device log. This keeps the existing advertising data intact and avoids overrunning the temporary buffer.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 63f365eb4d1668a04070151b555d55a07ede8d4b to < 10b0e832cc05d7aef4b92bed912cbd4a395d0862affected
  • c621211b308816889f0a3246de448bfcef8ab3ab to < 1338ee049a8910ba6c9cee963920e978e6893c7daffected
  • 907ef6e12fb558a0763e894311eb245a94c192dd to < 02f50e8bb69f9b22516163a09922f5537d3b12d1affected
  • 5725bc608252050ed8a4d47d59225b7dd73474c8 to < dafc9f57140e66a10945127aa7433c3d715dc253affected
  • 5725bc608252050ed8a4d47d59225b7dd73474c8 to < cdd8bbdbee763fdf5bf343e6f7d4e79347739f62affected
  • 5725bc608252050ed8a4d47d59225b7dd73474c8 to < 5c65b96b549ea2dcfde497436bf9e048deb87758affected
  • 15da883c010cbc2a84aec1738b6ad6ee477846deaffected
  • 6.1.142 to < 6.1.176affected
  • 6.6.94 to < 6.6.143affected
  • 6.12.34 to < 6.12.94affected
  • 6.15.3 to < 6.16affected

Linux Linux

Default version status: affected

  • 6.16affected
  • 0 to < 6.16unaffected
  • 6.1.176 to ≤ 6.1.*unaffected
  • 6.6.143 to ≤ 6.6.*unaffected
  • 6.12.94 to ≤ 6.12.*unaffected
  • 6.18.36 to ≤ 6.18.*unaffected
  • 7.0.13 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References