A vulnerability in the Linux kernel Bluetooth subsystem's hci_sync component causes memory leaks when the function hci_cmd_sync_queue_once fails. Specifically, when this function returns an error, the expected destroy callback is not invoked, leading to leaked references and memory. This issue has been fixed in the Linux kernel.