CVE-2026-53252: Bluetooth: fix memory leak in error path of hci_alloc_dev()
Published Jun 25, 2026
·Updated
Bluetooth: fix memory leak in error path of hciallocdev()
Affected Software
21 affected componentsFixes available
Linux Linux kernel
Microsoft azl3 kernel 6.6.141.1-1<6.6.143.1-1
6.6.143.1-1
Linux Linux kernel>=5.10.259<5.11
Linux Linux kernel>=6.1.167<6.1.176
Linux Linux kernel>=6.6.97<6.6.143
Linux Linux kernel>=6.12.36<6.12.94
Linux Linux kernel>=6.15.5<6.16
Linux Linux kernel>=6.16.1<6.18.36
Linux Linux kernel>=6.19<7.0.13
Linux Linux kernel=5.15.209
Linux Linux kernel=6.16
Linux Linux kernel=6.16-rc4
Linux Linux kernel=6.16-rc5
Linux Linux kernel=6.16-rc6
Linux Linux kernel=6.16-rc7
Linux Linux kernel=7.1-rc1
Linux Linux kernel=7.1-rc2
Linux Linux kernel=7.1-rc3
Linux Linux kernel=7.1-rc4
Linux Linux kernel=7.1-rc5
Linux Linux kernel=7.1-rc6
Remediation
Event History
Jun 25, 2026
CVE Published
via MITRE·08:39 AM
Data Sourced
via MITRE·08:39 AM
Description
Data Sourced
via NVD·09:16 AM
RemedyDescriptionSeverityWeaknessAffected Software
Jun 27, 2026
Data Sourced
via Microsoft·08:19 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·08:19 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2026-53252?
CVE-2026-53252 has a risk severity rating of 7.
2
What does CVE-2026-53252 affect?
CVE-2026-53252 affects the Linux kernel's Bluetooth subsystem.
3
How do I fix CVE-2026-53252?
To fix CVE-2026-53252, upgrade the Linux kernel to a version that includes the patch for this vulnerability.
4
What is the impact of CVE-2026-53252?
The impact of CVE-2026-53252 is a memory leak that occurs during early failures in Bluetooth device initialization.
5
Is CVE-2026-53252 a remote code execution vulnerability?
No, CVE-2026-53252 is not a remote code execution vulnerability; it specifically involves a memory leak in the Bluetooth stack.