{ "dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": { "cveId": "CVE-2026-53073", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-06-09T07:44:35.383Z", "datePublished": "2026-06-24T16:30:14.463Z", "dateUpdated": "2026-06-24T16:30:14.463Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-06-24T16:30:14.463Z" }, "descriptions": [ { "lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error\n\nWhen hci_register_dev() fails in hci_uart_register_dev()\nHCI_UART_PROTO_INIT is not cleared before calling hu->proto->close(hu)\nand setting hu->hdev to NULL. This means incoming UART data will reach\nthe protocol-specific recv handler in hci_uart_tty_receive() after\nresources are freed.\n\nClear HCI_UART_PROTO_INIT with a write lock before calling\nhu->proto->close() and setting hu->hdev to NULL. The write lock ensures\nall active readers have completed and no new reader can enter the\nprotocol recv path before resources are freed.\n\nThis allows the protocol-specific recv functions to remove the\n\"HCI_UART_REGISTERED\" guard without risking a null pointer dereference\nif hci_register_dev() fails." } ], "affected": [ { "product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": [ "drivers/bluetooth/hci_ldisc.c" ], "versions": [ { "version": "a40f94f7caa8d3421b64f63ac31bc0f24c890f39", "lessThan": "ebb39b2d81731b83ee71a1ba6dd0291a57b5ac07", "status": "affected", "versionType": "git" }, { "version": "9e5a0f5777162e503400c70c6ed25fbbe2d38799", "lessThan": "ed4033fb85ccaaf6c3983be3c7b037e48253d232", "status": "affected", "versionType": "git" }, { "version": "80f14e9de6a43a0bd8194cad1003a3e6dcbc3984", "lessThan": "356dee1bcac4d0d9152390561fa63331ebff211b", "status": "affected", "versionType": "git" }, { "version": "02e1bcdfdf769974e7e9fa285e295cd9852e2a38", "lessThan": "a673cf6c4ac702cb79ac1f4d7fc4de763a6a3e40", "status": "affected", "versionType": "git" }, { "version": "281782d2c6730241e300d630bb9f200d831ede71", "lessThan": "f4b69c35813c432973d340d3600c01de106ed474", "status": "affected", "versionType": "git" }, { "version": "5df5dafc171b90d0b8d51547a82657cd5a1986c7", "lessThan": "3daa5818e473ed60eb69d8b5c71b651909d28c5a", "status": "affected", "versionType": "git" }, { "version": "5df5dafc171b90d0b8d51547a82657cd5a1986c7", "lessThan": "194f029a4d7f739e44ebc1f473120187b4de5104", "status": "affected", "versionType": "git" }, { "version": "5df5dafc171b90d0b8d51547a82657cd5a1986c7", "lessThan": "68d39ea5e0adc9ecaea1ce8abd842ec972eb8718", "status": "affected", "versionType": "git" }, { "version": "1dcf08fcff5ca529de6dc0395091f28854f4e54a", "status": "affected", "versionType": "git" }, { "version": "8e5aff600539e5faea294d9612cca50220e602b8", "status": "affected", "versionType": "git" }, { "version": "db7509fa110dd9b11134b75894677f30353b2c51", "status": "affected", "versionType": "git" }, { "version": "5.10.237", "lessThan": "5.10.258", "status": "affected", "versionType": "semver" }, { "version": "5.15.181", "lessThan": "5.15.209", "status": "affected", "versionType": "semver" }, { "version": "6.1.135", "lessThan": "6.1.175", "status": "affected", "versionType": "semver" }, { "version": "6.6.88", "lessThan": "6.6.141", "status": "affected", "versionType": "semver" }, { "version": "6.12.24", "lessThan": "6.12.91", "status": "affected", "versionType": "semver" }, { "version": "5.4.293", "lessThan": "5.5", "status": "affected", "versionType": "semver" }, { "version": "6.13.12", "lessThan": "6.14", "status": "affected", "versionType": "semver" }, { "version": "6.14.3", "lessThan": "6.15", "status": "affected", "versionType": "semver" } ] }, { "product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": [ "drivers/bluetooth/hci_ldisc.c" ], "versions": [ { "version": "6.15", "status": "affected" }, { "version": "0", "lessThan": "6.15", "status": "unaffected", "versionType": "semver" }, { "version": "5.10.258", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver" }, { "version": "5.15.209", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.1.175", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.6.141", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.12.91", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.18.33", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver" }, { "version": "7.0.10", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver" }, { "version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix" } ] } ], "cpeApplicability": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10.237", "versionEndExcluding": "5.10.258" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15.181", "versionEndExcluding": "5.15.209" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.1.135", "versionEndExcluding": "6.1.175" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6.88", "versionEndExcluding": "6.6.141" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.12.24", "versionEndExcluding": "6.12.91" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "6.18.33" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "7.0.10" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "7.1" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.4.293" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.13.12" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.14.3" } ] } ] } ], "references": [ { "url": "https://git.kernel.org/stable/c/ebb39b2d81731b83ee71a1ba6dd0291a57b5ac07" }, { "url": "https://git.kernel.org/stable/c/ed4033fb85ccaaf6c3983be3c7b037e48253d232" }, { "url": "https://git.kernel.org/stable/c/356dee1bcac4d0d9152390561fa63331ebff211b" }, { "url": "https://git.kernel.org/stable/c/a673cf6c4ac702cb79ac1f4d7fc4de763a6a3e40" }, { "url": "https://git.kernel.org/stable/c/f4b69c35813c432973d340d3600c01de106ed474" }, { "url": "https://git.kernel.org/stable/c/3daa5818e473ed60eb69d8b5c71b651909d28c5a" }, { "url": "https://git.kernel.org/stable/c/194f029a4d7f739e44ebc1f473120187b4de5104" }, { "url": "https://git.kernel.org/stable/c/68d39ea5e0adc9ecaea1ce8abd842ec972eb8718" } ], "title": "Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error", "x_generator": { "engine": "bippy-1.2.0" } } } }