Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-53252

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix memory leak in error path of hci_alloc_dev() Early failures in Bluetooth HCI UART configuration leak SRCU percpu memory. When device initialization fails before hci_register_dev() completes, the HCI_UNREGISTER flag is never set. As a result, when the device reference count reaches zero, bt_host_release() evaluates this flag as false and falls back to a direct kfree(hdev). Because hci_release_dev() is bypassed,
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:762b7e50ab44b7693d45da6d267347f73ecff7324ea40f8d2a1bcb496142bc34
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/bluetooth/hci_sysfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"5b7dfca6f852e6b9d809fd0263b5427cc9fb33fd","status":"affected","version":"90dee0a0ff84fac8accd5be98412b3819f667149","versionType":"git"},{"lessThan":"c016118b9e51eeaf5bc93850d4c455a3b583c0aa","status":"affected","version":"c56b177efce8b62798e4d96bdb9867106cb7c4a0","versionType":"git"},{"lessThan":"0622e527a31d4b44737fed5c1a2ac1fc2cfb5184","status":"affected","version":"bc0819a25e04cd68ef35…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:828687f83abeddc28aae0acf65afc2518472144efa04d9a357f7261cc4578939 · sha256:b58b176543347ee8… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/bluetooth/hci_sysfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.16"},{"lessThan":"6.16","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.143","versionType":"semver"},{"lessT…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:828687f83abeddc28aae0acf65afc2518472144efa04d9a357f7261cc4578939 · sha256:b58b176543347ee8… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/bluetooth/hci_sysfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"5b7dfca6f852e6b9d809fd0263b5427cc9fb33fd","status":"affected","version":"90dee0a0ff84fac8accd5be98412b3819f667149","versionType":"git"},{"lessThan":"c016118b9e51eeaf5bc93850d4c455a3b583c0aa","status":"affected","version":"c56b177efce8b62798e4d96bdb9867106cb7c4a0","versionType":"git"},{"lessThan":"0622e527a31d4b44737fed5c1a2ac1fc2cfb5184","status":"affected","version":"bc0819a25e04cd68ef35…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:828687f83abeddc28aae0acf65afc2518472144efa04d9a357f7261cc4578939 · sha256:b58b176543347ee8… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["net/bluetooth/hci_sysfs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.16"},{"lessThan":"6.16","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.143","versionType":"semver"},{"lessT…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:828687f83abeddc28aae0acf65afc2518472144efa04d9a357f7261cc4578939 · sha256:b58b176543347ee8… · /containers/cna/affected/1

Source references

7 source assertions
{"url":"https://git.kernel.org/stable/c/0622e527a31d4b44737fed5c1a2ac1fc2cfb5184"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:828687f83abeddc28aae0acf65afc2518472144efa04d9a357f7261cc4578939 · sha256:b58b176543347ee8… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/37b3009bf5976e8ab77c8b9a9bc3bbd7ff49e37f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:828687f83abeddc28aae0acf65afc2518472144efa04d9a357f7261cc4578939 · sha256:b58b176543347ee8… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/5b7dfca6f852e6b9d809fd0263b5427cc9fb33fd"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:828687f83abeddc28aae0acf65afc2518472144efa04d9a357f7261cc4578939 · sha256:b58b176543347ee8… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/bc2efe73c194a74839d7cf57b63880d97e21d309"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:828687f83abeddc28aae0acf65afc2518472144efa04d9a357f7261cc4578939 · sha256:b58b176543347ee8… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/c016118b9e51eeaf5bc93850d4c455a3b583c0aa"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:828687f83abeddc28aae0acf65afc2518472144efa04d9a357f7261cc4578939 · sha256:b58b176543347ee8… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/ce4b4cac3c5749b6aa75e62e2991ae2263f2f889"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:828687f83abeddc28aae0acf65afc2518472144efa04d9a357f7261cc4578939 · sha256:b58b176543347ee8… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/f82799407a50af7bcacacf09cc9b279af8fe9b81"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:828687f83abeddc28aae0acf65afc2518472144efa04d9a357f7261cc4578939 · sha256:b58b176543347ee8… · /containers/cna/references/5

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer