CVE-2026-53364
kernel: Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate()
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 13, 2026
Updated · October 29, 2026
Description
A flaw was found in the Linux kernel's Bluetooth Host Controller Interface (HCI) connection handling. The hci_le_big_terminate() function, which is responsible for terminating Bluetooth connections, allocates memory but fails to free it under specific conditions when certain flags are not set. This memory leak could lead to resource exhaustion, potentially resulting in a denial of service (DoS).
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime