CVE-2026-53209: Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend
Bluetooth: hcisync: reject oversized Broadcast Announcement prepend
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.143.1-1 - Compensating control
In hci_adv_bcast_annoucement(), reject a Broadcast Announcement prepend when the combined advertising data would exceed the temporary buffer before copying the existing payload, and report the failure through the device log.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53209?
The severity of CVE-2026-53209 is classified as high with a score of 7.8.
What does CVE-2026-53209 affect?
CVE-2026-53209 affects the Bluetooth functionality in the Linux kernel.
How do I fix CVE-2026-53209?
You can fix CVE-2026-53209 by applying the available patch provided for the Linux kernel.
What are the potential impacts of CVE-2026-53209?
The impacts of CVE-2026-53209 include potential unauthorized access and data exposure via Bluetooth.
Is there a workaround for CVE-2026-53209?
There are no known workarounds for CVE-2026-53209; patching is the recommended approach.