The Linux kernel Bluetooth subsystem's hci_le_big_terminate() function improperly handles memory allocation for iso_list_data. When neither pa_sync_term nor big_sync_term flags are set after evaluating the PA and BIG sync connection state, the function returns early without freeing the allocated memory, causing a memory leak. This issue arose from a refactor that replaced raw parameters with a struct hci_conn and introduced new logic for PA/BIG flag evaluation. The existing memory free call on hci_cmd_sync_queue failure does not cover this early-return path, leading to the leak.

The vulnerability results in a memory leak in the Bluetooth subsystem of the Linux kernel. While it does not affect confidentiality, integrity, or availability directly, the leak can cause resource exhaustion (denial of service) over time if exploited or triggered repeatedly. There is no indication of known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since this vulnerability has been resolved, applying the official Linux kernel updates that include the fix for CVE-2026-53364 is recommended once available.