CVE-2026-53252

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak occurs in the Bluetooth HCI UART configuration during early failures in the hci alloc dev() function. When device initialization fails before hci register dev() completes, the HCI UNREGISTER flag is not set. Consequently, when the device reference count reaches zero, the bt host release() function performs a direct kfree(hdev) instead of calling hci release dev(). This bypasses the cleanup of the SRCU (Sleep-Read-Copy-Update) struct, which is a synchronization mechanism used in the kernel, leading to a leak of percpu memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.