Riskcovery

CVE-2026-64144

Bluetooth: btmtk: fix urb->setup_packet leak in error paths

State
Published
Severity
Not scored
Published
Jul 19, 2026
Updated
Oct 30, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btmtk: fix urb->setup_packet leak in error paths

The setup_packet of control urb is not freed if usb_submit_urb fails or the submitted urb is killed. Add free in these two paths.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a1c49c434e15050b5dafe3b6f5cc732d4f02d657 to before ecd8d2531766641958a667829907204066cfb51aAffected
  • a1c49c434e15050b5dafe3b6f5cc732d4f02d657 to before 2a1905730e0c771b999906a7b509722f795563c6Affected
  • a1c49c434e15050b5dafe3b6f5cc732d4f02d657 to before 68c027c2003b0a8a1439d0301c59c6fd1eb3b844Affected
  • a1c49c434e15050b5dafe3b6f5cc732d4f02d657 to before a0f5268c77eb73f84ba7c210ddfc54b1c73ff80cAffected
  • a1c49c434e15050b5dafe3b6f5cc732d4f02d657 to before 0d2572bafea33c7cd1d77c6a25f25ff31a432482Affected
  • a1c49c434e15050b5dafe3b6f5cc732d4f02d657 to before dd1dda6b8d6e1f4376a5b3055a04f0ecbdb4d6bdAffected
LinuxLinux
  • 5.3Affected
  • before 5.3Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.142 through 6.6.*Not affected
  • 6.12.92 through 6.12.*Not affected
  • 6.18.34 through 6.18.*Not affected
  • 7.0.11 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.