PT-2026-57836 · Linux · Linux Kernel

Published 2026-07-13 · Updated 2026-07-13 · CVE-2026-53364

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists in the Bluetooth component within the hci le big terminate() function. The issue occurs when the function allocates iso list data using kzalloc obj but returns 0 without freeing the memory if neither the pa sync term nor big sync term flags are set after evaluating the PA and BIG sync connection state. This behavior was introduced during a refactoring of the function to accept struct hci conn instead of raw u8 parameters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-53364

Affected Products

Linux Kernel

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-53364 · Security Note
• https://git.kernel.org/stable/c/e6b78019664dfe37c3dc707f50e7b453d6c7726d · Note
• https://git.kernel.org/stable/c/bfa9d28960ed677d556bdf097073bc3129686229 · Note
• https://twitter.com/VulmonFeeds/status/2076803734995157216 · Twitter Post
• https://git.kernel.org/stable/c/a59d4f4217e6200ca9180643e5738a87d3fa8be0 · Note