Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-53251

Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync hci_get_route() returns a reference-counted hci_dev pointer via hci_dev_hold(). The function exits normally or with an error without ever releasing it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1360e5b6ce63d63d23223a659ca2bbafa30a53aa to < 4bbec25f47b930101294fd310c627c3f53e9661faffected
  • 07a9342b94a91b306ed1cf6aa8254aea210764c9 to < 33d677d2e3713d98012c3dbd4a9207f7d785b854affected
  • 07a9342b94a91b306ed1cf6aa8254aea210764c9 to < 23e8eb16820b866528fb300dc67fe3f67f00ef62affected
  • 07a9342b94a91b306ed1cf6aa8254aea210764c9 to < 5cbf290b79351971f20c7a533247e8d58a3f970caffected
  • bfec1e55314896bf4a4cfdb3a9ad4872be9f06edaffected
  • 6.12.2 to < 6.12.94affected
  • 6.11.11 to < 6.12affected

Linux Linux

Default version status: affected

  • 6.13affected
  • 0 to < 6.13unaffected
  • 6.12.94 to ≤ 6.12.*unaffected
  • 6.18.36 to ≤ 6.18.*unaffected
  • 7.0.13 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References