Bluetooth: hci_ll: Fix firmware leak on error path

MITRE NVD CVE.ORG JSON API Print: PDF PDF

Summary

CVECVE-2026-43069
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-05-05 16:16:16 UTC
Updated2026-05-29 17:53:53 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_ll: Fix firmware leak on error path Smatch reports: drivers/bluetooth/hci_ll.c:587 download_firmware() warn: 'fw' from request_firmware() not released on lines: 544. In download_firmware(), if request_firmware() succeeds but the returned firmware content is invalid (no data or zero size), the function returns without releasing the firmware, resulting in a resource leak. Fix this by calling release_firmware() before returning when request_firmware() succeeded but the firmware content is invalid.

Risk And Classification

Primary CVSS: v3.1 5.5 MEDIUM from [email protected]

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Problem Types: CWE-401

CVSS v3.1 Breakdown

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Operating System Linux Linux Kernel All All All All

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected 371805522f870986144fcd88727a47858e364a2c 95e8601af227b2b4390eecf8db6abdb9f6a91f17 git Not specified
CNA Linux Linux affected 371805522f870986144fcd88727a47858e364a2c e6d95488c8c964d1df0d3e1db44c958706311e86 git Not specified
CNA Linux Linux affected 371805522f870986144fcd88727a47858e364a2c b2dfbf1b5ff192cefd49574b951a4af9ddd32213 git Not specified
CNA Linux Linux affected 371805522f870986144fcd88727a47858e364a2c 28904375d54b436a757641fb0331537778c0de5a git Not specified
CNA Linux Linux affected 371805522f870986144fcd88727a47858e364a2c 5213ef54528dd1ac79b846e30d8f72ce092794aa git Not specified
CNA Linux Linux affected 371805522f870986144fcd88727a47858e364a2c 9ecbfd93cd6de6c78cb7fd51fe079e36c7ff074b git Not specified
CNA Linux Linux affected 371805522f870986144fcd88727a47858e364a2c a7803df606a7d22e896b030f619e1d9d20ae0c6b git Not specified
CNA Linux Linux affected 371805522f870986144fcd88727a47858e364a2c 31148a7be723aa9f2e8fbd62424825ab8d577973 git Not specified
CNA Linux Linux affected 4.12 Not specified
CNA Linux Linux unaffected 4.12 semver Not specified
CNA Linux Linux unaffected 5.10.253 5.10.* semver Not specified
CNA Linux Linux unaffected 5.15.203 5.15.* semver Not specified
CNA Linux Linux unaffected 6.1.168 6.1.* semver Not specified
CNA Linux Linux unaffected 6.6.131 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.80 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.21 6.18.* semver Not specified
CNA Linux Linux unaffected 6.19.11 6.19.* semver Not specified
CNA Linux Linux unaffected 7.0 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/31148a7be723aa9f2e8fbd62424825ab8d577973 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org Patch
git.kernel.org/stable/c/95e8601af227b2b4390eecf8db6abdb9f6a91f17 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org Patch
git.kernel.org/stable/c/a7803df606a7d22e896b030f619e1d9d20ae0c6b 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org Patch
git.kernel.org/stable/c/5213ef54528dd1ac79b846e30d8f72ce092794aa 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org Patch
git.kernel.org/stable/c/e6d95488c8c964d1df0d3e1db44c958706311e86 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org Patch
git.kernel.org/stable/c/b2dfbf1b5ff192cefd49574b951a4af9ddd32213 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org Patch
git.kernel.org/stable/c/28904375d54b436a757641fb0331537778c0de5a 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org Patch
git.kernel.org/stable/c/9ecbfd93cd6de6c78cb7fd51fe079e36c7ff074b 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org Patch
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report