CVE-2026-53251

Source
https://cve.org/CVERecord?id=CVE-2026-53251
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53251.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-53251
Downstream
BELL (1)
CGA (6)
DEBIAN (1)
MGASA (1)
openSUSE (1)
ROOT (1)
SUSE (5)
UBUNTU (1)
Related
Published
2026-06-25T08:39:43Z
Modified
2026-10-08T02:51:04Z
Summary
Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync
Details

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync

hci_get_route() returns a reference-counted hci_dev pointer via hci_dev_hold(). The function exits normally or with an error without ever releasing it.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53251.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1360e5b6ce63d63d23223a659ca2bbafa30a53aa
Fixed
4bbec25f47b930101294fd310c627c3f53e9661f
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
07a9342b94a91b306ed1cf6aa8254aea210764c9
Fixed
33d677d2e3713d98012c3dbd4a9207f7d785b854
Fixed
23e8eb16820b866528fb300dc67fe3f67f00ef62
Fixed
5cbf290b79351971f20c7a533247e8d58a3f970c
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.12.2
Fixed
6.12.94
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.11.11
Fixed
6.12
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
bfec1e55314896bf4a4cfdb3a9ad4872be9f06ed

Affected versions

v6.*
v6.11.11
v6.12.10
v6.12.11
v6.12.12
v6.12.13
v6.12.14
v6.12.15
v6.12.16
v6.12.17
v6.12.18
v6.12.19
v6.12.2
v6.12.20
v6.12.21
v6.12.22
v6.12.23
v6.12.24
v6.12.25
v6.12.26
v6.12.27
v6.12.28
v6.12.29
v6.12.3
v6.12.30
v6.12.31
v6.12.32
v6.12.33
v6.12.34
v6.12.35
v6.12.36
v6.12.37
v6.12.38
v6.12.39
v6.12.4
v6.12.40
v6.12.41
v6.12.42
v6.12.43
v6.12.44
v6.12.45
v6.12.46
v6.12.47
v6.12.48
v6.12.49
v6.12.5
v6.12.50
v6.12.51
v6.12.52
v6.12.53
v6.12.54
v6.12.55
v6.12.56
v6.12.57
v6.12.58
v6.12.59
v6.12.6
v6.12.60
v6.12.61
v6.12.62
v6.12.63
v6.12.64
v6.12.65
v6.12.66
v6.12.67
v6.12.68
v6.12.69
v6.12.7
v6.12.70
v6.12.71
v6.12.72
v6.12.73
v6.12.74
v6.12.75
v6.12.76
v6.12.77
v6.12.78
v6.12.79
v6.12.8
v6.12.80
v6.12.81
v6.12.82
v6.12.83
v6.12.84
v6.12.85
v6.12.86
v6.12.87
v6.12.88
v6.12.89
v6.12.9
v6.12.90
v6.12.91
v6.12.92
v6.12.93

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53251.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.12.94
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.36
Fixed
7.0.13

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53251.json"