CVE-2026-53251 Details
Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync hci_get_route() returns a reference-counted hci_dev pointer via hci_dev_hold(). The function exits normally or with an error without ever releasing it.
A vulnerability exists in the Linux kernel's Bluetooth implementation, specifically within the handling of ISO connections. The issue arises because the function responsible for synchronizing BIG (Broadcast Isochronous Group) connections does not properly release a reference to the Bluetooth device it holds. This oversight can lead to memory management issues, as the reference count for the device is not decremented, potentially causing resource leaks or other unintended behaviors.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for downloading the patched version are available on the Linux kernel's official website.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/23e8eb16820b866528fb300dc67fe3f67f00ef62 | kernel.org | Patch |
| https://git.kernel.org/stable/c/33d677d2e3713d98012c3dbd4a9207f7d785b854 | kernel.org | Patch |
| https://git.kernel.org/stable/c/4bbec25f47b930101294fd310c627c3f53e9661f | kernel.org | Patch |
| https://git.kernel.org/stable/c/5cbf290b79351971f20c7a533247e8d58a3f970c | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-772 | Missing Release of Resource after Effective Lifetime | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.11.11, < 6.12 >= 6.12.2, < 6.12.94 >= 6.13, < 6.18.36 >= 6.19, < 7.0.13 7.1 rc1 7.1 rc2 7.1 rc3 7.1 rc4 7.1 rc5 7.1 rc6 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 8, 2026 | Initial Analysis | [email protected] |
| Jun 25, 2026 | New CVE Received | kernel.org |