CVE-2026-90254

A flaw was found in the Linux kernel's Bluetooth subsystem. Specifically, a memory leak occurs in the hci_sync component when an advertising instance is not properly freed during certain failure or cancellation scenarios. This happens because the adv_timeout_expire() function passes a memory-allocated instance without a proper mechanism to release the memory if the operation fails or is cancelled. Over time, this unreleased memory could accumulate, potentially leading to a Denial of Service (DoS) condition where the system becomes unstable or unresponsive.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.