In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: iso: Always release hdev at the end of isolistenbis
Since hcigetroute holds the device before returning, the hdev should be released with hcidevput at the end of isolistenbis even if the function returns with an error.