CVE-2026-53073: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error
Published Jun 24, 2026
·Updated
Bluetooth: hcildisc: Clear HCIUARTPROTOINIT on error
Affected Software
11 affected componentsFixes available
Linux Linux kernel
Microsoft azl3 kernel 6.6.139.1-1<6.6.143.1-1
6.6.143.1-1
Linux Linux kernel>=5.4.293<5.5
Linux Linux kernel>=5.10.237<5.10.258
Linux Linux kernel>=5.15.181<5.15.209
Linux Linux kernel>=6.1.135<6.1.175
Linux Linux kernel>=6.6.88<6.6.141
Linux Linux kernel>=6.12.24<6.12.91
Linux Linux kernel>=6.13.12<6.14
Linux Linux kernel>=6.14.3<6.18.33
Linux Linux kernel>=6.19<7.0.10
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.143.1-1 - Configuration
Clear HCI_UART_PROTO_INIT with a write lock before calling hu->proto->close(hu) and setting hu->hdev to NULL, ensuring active readers complete and no new reader enters the protocol receive path before resources are freed.
Linux kernel Bluetooth hci_ldisc HCI_UART_PROTO_INIT = clear under a write lock before calling hu->proto->close(hu) and setting hu->hdev to NULL
Event History
Jun 24, 2026
CVE Published
via MITRE·04:30 PM
Data Sourced
via MITRE·04:30 PM
Description
Data Sourced
via NVD·05:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jun 27, 2026
Data Sourced
via Microsoft·08:12 AM
DescriptionSeverityWeaknessAffected Software