Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-53251

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync hci_get_route() returns a reference-counted hci_dev pointer via hci_dev_hold(). The function exits normally or with an error without ever releasing it.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:631f5fc0ca515be89d0e5964322f96dc30d49abd96b88f28a22f5354a65320b9
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/bluetooth/iso.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.13"},{"lessThan":"6.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.94","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.36","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.13","versionType":"semver"},{"lessThanOrEq…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:62a2562722cc7e32086d73d1d794f11f47948a204959f19d9a56f2bba647fbff · sha256:e89ccd5241d82120… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/bluetooth/iso.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"4bbec25f47b930101294fd310c627c3f53e9661f","status":"affected","version":"1360e5b6ce63d63d23223a659ca2bbafa30a53aa","versionType":"git"},{"lessThan":"33d677d2e3713d98012c3dbd4a9207f7d785b854","status":"affected","version":"07a9342b94a91b306ed1cf6aa8254aea210764c9","versionType":"git"},{"lessThan":"23e8eb16820b866528fb300dc67fe3f67f00ef62","status":"affected","version":"07a9342b94a91b306ed1cf6aa8…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:62a2562722cc7e32086d73d1d794f11f47948a204959f19d9a56f2bba647fbff · sha256:e89ccd5241d82120… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/bluetooth/iso.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.13"},{"lessThan":"6.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.94","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.36","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.13","versionType":"semver"},{"lessThanOrEq…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:62a2562722cc7e32086d73d1d794f11f47948a204959f19d9a56f2bba647fbff · sha256:e89ccd5241d82120… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/bluetooth/iso.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"4bbec25f47b930101294fd310c627c3f53e9661f","status":"affected","version":"1360e5b6ce63d63d23223a659ca2bbafa30a53aa","versionType":"git"},{"lessThan":"33d677d2e3713d98012c3dbd4a9207f7d785b854","status":"affected","version":"07a9342b94a91b306ed1cf6aa8254aea210764c9","versionType":"git"},{"lessThan":"23e8eb16820b866528fb300dc67fe3f67f00ef62","status":"affected","version":"07a9342b94a91b306ed1cf6aa8…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:62a2562722cc7e32086d73d1d794f11f47948a204959f19d9a56f2bba647fbff · sha256:e89ccd5241d82120… · /containers/cna/affected/0

Source references

4 source assertions
{"url":"https://git.kernel.org/stable/c/23e8eb16820b866528fb300dc67fe3f67f00ef62"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:62a2562722cc7e32086d73d1d794f11f47948a204959f19d9a56f2bba647fbff · sha256:e89ccd5241d82120… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/33d677d2e3713d98012c3dbd4a9207f7d785b854"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:62a2562722cc7e32086d73d1d794f11f47948a204959f19d9a56f2bba647fbff · sha256:e89ccd5241d82120… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/4bbec25f47b930101294fd310c627c3f53e9661f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:62a2562722cc7e32086d73d1d794f11f47948a204959f19d9a56f2bba647fbff · sha256:e89ccd5241d82120… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/5cbf290b79351971f20c7a533247e8d58a3f970c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:62a2562722cc7e32086d73d1d794f11f47948a204959f19d9a56f2bba647fbff · sha256:e89ccd5241d82120… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer