CVE-2026-53251 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync hci_get_route() returns a reference-counted hci_dev pointer via hci_dev_hold(). The function exits normally or with an error without ever releasing it.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/23e8eb16820b866528fb300dc67fe3f67f00ef62
https://git.kernel.org/stable/c/33d677d2e3713d98012c3dbd4a9207f7d785b854
https://git.kernel.org/stable/c/4bbec25f47b930101294fd310c627c3f53e9661f
https://git.kernel.org/stable/c/5cbf290b79351971f20c7a533247e8d58a3f970c

History

Thu, 25 Jun 2026 09:15:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync hci_get_route() returns a reference-counted hci_dev pointer via hci_dev_hold(). The function exits normally or with an error without ever releasing it.
Title		Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/23e8eb16820b866528fb300dc67fe3f67f00ef62 https://git.kernel.org/stable/c/33d677d2e3713d98012c3dbd4a9207f7d785b854 https://git.kernel.org/stable/c/4bbec25f47b930101294fd310c627c3f53e9661f https://git.kernel.org/stable/c/5cbf290b79351971f20c7a533247e8d58a3f970c

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-06-25T08:39:43.290Z

Updated: 2026-06-25T08:39:43.290Z

Reserved: 2026-06-09T07:44:35.394Z

Link: CVE-2026-53251

Vulnrichment

No data.

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-53251", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-06-09T07:44:35.394Z", "datePublished": "2026-06-25T08:39:43.290Z", "dateUpdated": "2026-06-25T08:39:43.290Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-06-25T08:39:43.290Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync\n\nhci_get_route() returns a reference-counted hci_dev pointer via\nhci_dev_hold(). The function exits normally or with an error without ever\nreleasing it."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/bluetooth/iso.c"], "versions": [{"version": "1360e5b6ce63d63d23223a659ca2bbafa30a53aa", "lessThan": "4bbec25f47b930101294fd310c627c3f53e9661f", "status": "affected", "versionType": "git"}, {"version": "07a9342b94a91b306ed1cf6aa8254aea210764c9", "lessThan": "33d677d2e3713d98012c3dbd4a9207f7d785b854", "status": "affected", "versionType": "git"}, {"version": "07a9342b94a91b306ed1cf6aa8254aea210764c9", "lessThan": "23e8eb16820b866528fb300dc67fe3f67f00ef62", "status": "affected", "versionType": "git"}, {"version": "07a9342b94a91b306ed1cf6aa8254aea210764c9", "lessThan": "5cbf290b79351971f20c7a533247e8d58a3f970c", "status": "affected", "versionType": "git"}, {"version": "bfec1e55314896bf4a4cfdb3a9ad4872be9f06ed", "status": "affected", "versionType": "git"}, {"version": "6.12.2", "lessThan": "6.12.94", "status": "affected", "versionType": "semver"}, {"version": "6.11.11", "lessThan": "6.12", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/bluetooth/iso.c"], "versions": [{"version": "6.13", "status": "affected"}, {"version": "0", "lessThan": "6.13", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.94", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.36", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.13", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.12.2", "versionEndExcluding": "6.12.94"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.13", "versionEndExcluding": "6.18.36"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.13", "versionEndExcluding": "7.0.13"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.13", "versionEndExcluding": "7.1"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11.11"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/4bbec25f47b930101294fd310c627c3f53e9661f"}, {"url": "https://git.kernel.org/stable/c/33d677d2e3713d98012c3dbd4a9207f7d785b854"}, {"url": "https://git.kernel.org/stable/c/23e8eb16820b866528fb300dc67fe3f67f00ef62"}, {"url": "https://git.kernel.org/stable/c/5cbf290b79351971f20c7a533247e8d58a3f970c"}], "title": "Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync", "x_generator": {"engine": "bippy-1.2.0"}}}}