CVE-2026-53252

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix memory leak in error path of hci_alloc_dev() Early failures in Bluetooth HCI UART configuration leak SRCU percpu memory. When device initialization fails before hci_register_dev() completes, the HCI_UNREGISTER flag is never set. As a result, when the device reference count reaches zero, bt_host_release() evaluates this flag as false and falls back to a direct kfree(hdev). Because hci_release_dev() is bypassed, the SRCU struct initialized early in hci_alloc_dev() is never cleaned up, resulting in a leak of percpu memory. Fix the leak by explicitly calling cleanup_srcu_struct() in the fallback (unregistered) branch of bt_host_release() before freeing the device.

• linux linux kernel (>= 5.10.259 < 5.11) • linux linux kernel (>= 6.1.167 < 6.1.176) • linux linux kernel (>= 6.6.97 < 6.6.143) • linux linux kernel (>= 6.12.36 < 6.12.94) • linux linux kernel (>= 6.15.5 < 6.16) • linux linux kernel (>= 6.16.1 < 6.18.36) • linux linux kernel (>= 6.19 < 7.0.13) • linux linux kernel 5.15.209 • linux linux kernel 6.16 • linux linux kernel 7.1