{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-53209", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-06-09T07:44:35.391Z", "datePublished": "2026-06-25T08:39:14.915Z", "dateUpdated": "2026-06-25T08:39:14.915Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-06-25T08:39:14.915Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sync: reject oversized Broadcast Announcement prepend\n\nExisting advertising instances can already hold the maximum extended\nadvertising payload. When hci_adv_bcast_annoucement() prepends the\nBroadcast Announcement service data to that payload, the combined data\nmay no longer fit in the temporary buffer used to rebuild the\nadvertising data.\n\nReject that case before copying the existing payload and report the\nfailure through the device log. This keeps the existing advertising\ndata intact and avoids overrunning the temporary buffer."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/bluetooth/hci_sync.c"], "versions": [{"version": "63f365eb4d1668a04070151b555d55a07ede8d4b", "lessThan": "10b0e832cc05d7aef4b92bed912cbd4a395d0862", "status": "affected", "versionType": "git"}, {"version": "c621211b308816889f0a3246de448bfcef8ab3ab", "lessThan": "1338ee049a8910ba6c9cee963920e978e6893c7d", "status": "affected", "versionType": "git"}, {"version": "907ef6e12fb558a0763e894311eb245a94c192dd", "lessThan": "02f50e8bb69f9b22516163a09922f5537d3b12d1", "status": "affected", "versionType": "git"}, {"version": "5725bc608252050ed8a4d47d59225b7dd73474c8", "lessThan": "dafc9f57140e66a10945127aa7433c3d715dc253", "status": "affected", "versionType": "git"}, {"version": "5725bc608252050ed8a4d47d59225b7dd73474c8", "lessThan": "cdd8bbdbee763fdf5bf343e6f7d4e79347739f62", "status": "affected", "versionType": "git"}, {"version": "5725bc608252050ed8a4d47d59225b7dd73474c8", "lessThan": "5c65b96b549ea2dcfde497436bf9e048deb87758", "status": "affected", "versionType": "git"}, {"version": "15da883c010cbc2a84aec1738b6ad6ee477846de", "status": "affected", "versionType": "git"}, {"version": "6.1.142", "lessThan": "6.1.176", "status": "affected", "versionType": "semver"}, {"version": "6.6.94", "lessThan": "6.6.143", "status": "affected", "versionType": "semver"}, {"version": "6.12.34", "lessThan": "6.12.94", "status": "affected", "versionType": "semver"}, {"version": "6.15.3", "lessThan": "6.16", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/bluetooth/hci_sync.c"], "versions": [{"version": "6.16", "status": "affected"}, {"version": "0", "lessThan": "6.16", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.176", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.143", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.94", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.36", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.13", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.1.142", "versionEndExcluding": "6.1.176"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6.94", "versionEndExcluding": "6.6.143"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.12.34", "versionEndExcluding": "6.12.94"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.16", "versionEndExcluding": "6.18.36"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.16", "versionEndExcluding": "7.0.13"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.16", "versionEndExcluding": "7.1"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/10b0e832cc05d7aef4b92bed912cbd4a395d0862"}, {"url": "https://git.kernel.org/stable/c/1338ee049a8910ba6c9cee963920e978e6893c7d"}, {"url": "https://git.kernel.org/stable/c/02f50e8bb69f9b22516163a09922f5537d3b12d1"}, {"url": "https://git.kernel.org/stable/c/dafc9f57140e66a10945127aa7433c3d715dc253"}, {"url": "https://git.kernel.org/stable/c/cdd8bbdbee763fdf5bf343e6f7d4e79347739f62"}, {"url": "https://git.kernel.org/stable/c/5c65b96b549ea2dcfde497436bf9e048deb87758"}], "title": "Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[63f365eb4d1668a04070151b555d55a07ede8d4b,10b0e832cc05d7aef4b92bed912cbd4a395d0862)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[c621211b308816889f0a3246de448bfcef8ab3ab,1338ee049a8910ba6c9cee963920e978e6893c7d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[907ef6e12fb558a0763e894311eb245a94c192dd,02f50e8bb69f9b22516163a09922f5537d3b12d1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5725bc608252050ed8a4d47d59225b7dd73474c8,dafc9f57140e66a10945127aa7433c3d715dc253)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5725bc608252050ed8a4d47d59225b7dd73474c8,cdd8bbdbee763fdf5bf343e6f7d4e79347739f62)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[5725bc608252050ed8a4d47d59225b7dd73474c8,5c65b96b549ea2dcfde497436bf9e048deb87758)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[15da883c010cbc2a84aec1738b6ad6ee477846de,15da883c010cbc2a84aec1738b6ad6ee477846de]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.1.142,6.1.176)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.6.94,6.6.143)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.12.34,6.12.94)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.15.3,6.16)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.16,6.16]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.16)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.176,6.1.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.143,6.6.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.94,6.12.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.36,6.18.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.0.13,7.0.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-06-25T12:00:14.024199+00:00", "updated": "2026-06-25T16:00:12.051982+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-119", "CWE-120"]}