CVE-2026-53364

MediumCVSS 5.5/10Last modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate()

hci_le_big_terminate() allocates iso_list_data via kzalloc_obj but returns 0 without freeing it when neither pa_sync_term nor big_sync_term flags are set after evaluating the PA and BIG sync connection state.

This early-return path was introduced when hci_le_big_terminate() was refactored to take struct hci_conn instead of raw u8 parameters, adding PA/BIG flag evaluation logic. The existing kfree() on hci_cmd_sync_queue failure does not cover this path.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= a8444cca514edd4e47e322926b10516a5a6d7016, < 488e808e3fa53200f3ef3324c45fcba4ae9f4972; >= a7bcffc673de219af2698fbb90627016233de67b, < e6b78019664dfe37c3dc707f50e7b453d6c7726d; >= a7bcffc673de219af2698fbb90627016233de67b, < a59d4f4217e6200ca9180643e5738a87d3fa8be0; >= a7bcffc673de219af2698fbb90627016233de67b, < bfa9d28960ed677d556bdf097073bc3129686229; 087812a6119b4cd5c9d658b48aee40a25707a1c6; >= 6.16.4, < 6.17
LinuxLinux6.17

References

Timeline

Published
Jul 13, 2026
Last modified
Nov 6, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-533655.5In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-skb sends When a largeCVE-2026-533667.8In the Linux kernel, the following vulnerability has been resolved: ipv4: account for fraggap on the paged allocation path In __ip_append_CVE-2026-533675.5In the Linux kernel, the following vulnerability has been resolved: selinux: fix avdcache auditing The per-task avdcache was incorrectly sCVE-2026-533687.1In the Linux kernel, the following vulnerability has been resolved: f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage CVE-2026-533698.4In the Linux kernel, the following vulnerability has been resolved: udf: reject descriptors with oversized CRC length udf_read_tagged() skCVE-2026-53376.5During the analysis, it was identified that authenticated attackers with Subscriber-level access or higher are able to perform an Insecure DCVE-2026-533705.5In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Improve validation and configuration of ACR masks CurrCVE-2026-533715.5In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: bound node_desc sysfs read with %.64s node_desc[64] in strCVE-2026-533725.5In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty trackingCVE-2026-533737.8In the Linux kernel, the following vulnerability has been resolved: mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap()CVE-2026-533748.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: zero-initialize GART table on allocation GART TLB is flushCVE-2026-533758.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevent partial address patches In the case that only
CVE-2026-53364: Medium severity, CVSS 5.5 | Vulnix