Threats Tagged 'cve-2026-53364'

A memory leak vulnerability in the Linux kernel's Bluetooth subsystem was identified and resolved. The issue occurs in the hci_le_big_terminate() function, where allocated memory is not freed under certain conditions due to an early return path. This flaw could lead to resource exhaustion on affected systems. The vulnerability has a medium severity rating with a CVSS score of 5.5. No specific affected Linux kernel versions are provided. No known exploits are reported in the wild.

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate() hci_le_big_terminate() allocates iso_list_data via kzalloc_obj but returns 0 without freeing it when neither pa_sync_term nor big_sync_term flags are set after evaluating the PA and BIG sync connection state. This early-return path was introduced when hci_le_big_terminate() was refactored to take struct hci_conn instead of raw u8 parameters, adding PA/BIG flag evaluation logic. The existing kfree() on hci_cmd_sync_queue failure does not cover this path.