CVE-2026-53364: Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate()
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hciconn: Fix memory leak in hcilebigterminate()
hcilebigterminate() allocates isolistdata via kzallocobj but returns 0 without freeing it when neither pasyncterm nor bigsyncterm flags are set after evaluating the PA and BIG sync connection state.
This early-return path was introduced when hcilebigterminate() was refactored to take struct hciconn instead of raw u8 parameters, adding PA/BIG flag evaluation logic. The existing kfree() on hcicmdsyncqueue failure does not cover this path.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Apply the Linux kernel security fix for the Bluetooth vulnerability described as a resolution to “Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate()” (PA/BIG flag evaluation logic / missing free on early-return path).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53364?
The severity of CVE-2026-53364 is rated as 5.
How do I fix CVE-2026-53364?
To fix CVE-2026-53364, update the Linux kernel to the latest version where the memory leak is addressed.
What systems are affected by CVE-2026-53364?
CVE-2026-53364 affects the Linux kernel, particularly systems utilizing Bluetooth functionality.
What are the potential impacts of CVE-2026-53364?
The potential impact of CVE-2026-53364 includes memory leaks that can lead to performance degradation over time.
Is CVE-2026-53364 exploitable remotely?
CVE-2026-53364 is primarily related to local memory management and does not indicate remote exploitation capabilities.