Answer in brief
CVE-2026-53364 records a Medium severity (CVSS 5.5) vulnerability in Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 5.5. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=a8444cca514edd4e47e322926b10516a5a6d7016 <488e808e3fa53200f3ef3324c45fcba4ae9f4972 || >=a7bcffc673de219af2698fbb90627016233de67b <e6b78019664dfe37c3dc707f50e7b453d6c7726d || >=a7bcffc673de219af2698fbb90627016233de67b <a59d4f4217e6200ca9180643e5738a87d3fa8be0 || >=a7bcffc673de219af2698fbb90627016233de67b <bfa9d28960ed677d556bdf097073bc3129686229 || 087812a6119b4cd5c9d658b48aee40a25707a1c6 || >=6.16.4 <6.17 | 488e808e3fa53200f3ef3324c45fcba4ae9f4972, e6b78019664dfe37c3dc707f50e7b453d6c7726d, a59d4f4217e6200ca9180643e5738a87d3fa8be0, bfa9d28960ed677d556bdf097073bc3129686229, 6.17 |
| Linux/Linuxgeneric | 6.17 | Not reported |
Published upstream
Jul 13, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Nov 6, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Jul 13, 2026
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate() hci_le_big_terminate() allocates iso_list_data via kzalloc_obj but returns 0 without freeing it when neither pa_sync_term nor big_sync_term flags are set after evaluating the PA and BIG sync connection state. This early-return path was introduced when hci_le_big_terminate() was refactored to take struct hci_conn instead of raw u8 parameters, adding PA/BIG flag evaluation logic. The existing kfree() on hci_cmd_sync_queue failure does not cover this path.
Quoted source text, attributed separately from HOL analysis.