CVE-2026-53252

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> Bluetooth: fix memory leak in error path of hci_alloc_dev()<br /> <br /> Early failures in Bluetooth HCI UART configuration leak SRCU percpu<br /> memory.<br /> <br /> When device initialization fails before hci_register_dev() completes,<br /> the HCI_UNREGISTER flag is never set. As a result, when the device<br /> reference count reaches zero, bt_host_release() evaluates this flag as<br /> false and falls back to a direct kfree(hdev).<br /> <br /> Because hci_release_dev() is bypassed, the SRCU struct initialized<br /> early in hci_alloc_dev() is never cleaned up, resulting in a leak of<br /> percpu memory.<br /> <br /> Fix the leak by explicitly calling cleanup_srcu_struct() in the<br /> fallback (unregistered) branch of bt_host_release() before freeing<br /> the device.