Bluetooth Device Memory Leak in Linux Kernel

CVE-2026-53252

What is CVE-2026-53252?

A memory leak vulnerability in the Linux kernel affects Bluetooth devices when early failures occur during HCI UART configuration. If device initialization fails before the hci_register_dev() function is complete, the HCI_UNREGISTER flag is not set. This oversight prevents the proper cleanup of resources, leading to a leak of percpu memory. The fix involves explicitly calling cleanup_srcu_struct() in the fallback scenario before freeing the device, ensuring that all initialized resources are properly released.

References