CVE-2026-53252
kernel: Bluetooth: fix memory leak in error path of hci_alloc_dev()
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 25, 2026
Updated · July 9, 2026
Description
A flaw was found in the Linux kernel's Bluetooth subsystem. Specifically, an issue in the error handling path of the hci_alloc_dev() function within the Bluetooth Host Controller Interface (HCI) Universal Asynchronous Receiver/Transmitter (UART) configuration can lead to a memory leak. This occurs when device initialization fails before proper registration, preventing the necessary cleanup of allocated memory. The continuous leakage of memory could potentially impact system stability and resource availability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-911 · Improper Update of Reference Count