Medium 5.5Published Jul 19, 2026

CVE-2026-64144Bluetooth: btmtk: fix urb->setup_packet leak in error paths

Updated under an hour ago (Oct 27, 2026, 3:50 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix urb->setup_packet leak in error paths The setup_packet of control urb is not freed if usb_submit_urb fails or the submitted urb is killed. Add free in these two paths.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Jul 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from a1c49c434e15050b5dafe3b6f5cc732d4f02d657 before 2a1905730e0c771b999906a7b509722f795563c6; from a1c49c434e15050b5dafe3b6f5cc732d4f02d657 before 68c027c2003b0a8a1439d0301c59c6fd1eb3b844; from a1c49c434e15050b5dafe3b6f5cc732d4f02d657 before a0f5268c77eb73f84ba7c210ddfc54b1c73ff80c; from a1c49c434e15050b5dafe3b6f5cc732d4f02d657 before 0d2572bafea33c7cd1d77c6a25f25ff31a432482; from a1c49c434e15050b5dafe3b6f5cc732d4f02d657 before dd1dda6b8d6e1f4376a5b3055a04f0ecbdb4d6bd	CNA record
linux linux_kernel linux:linux_kernel	from 5.3 before 6.6.142; from 6.7 before 6.12.92; from 6.13 before 6.18.34; from 6.19 before 7.0.11; 7.1; 7.1; 7.1; 7.1	NVD

References

References

https://git.kernel.org/stable/c/2a1905730e0c771b999906a7b509722f795563c6	patch
https://git.kernel.org/stable/c/68c027c2003b0a8a1439d0301c59c6fd1eb3b844	patch
https://git.kernel.org/stable/c/a0f5268c77eb73f84ba7c210ddfc54b1c73ff80c	patch
https://git.kernel.org/stable/c/0d2572bafea33c7cd1d77c6a25f25ff31a432482	patch
https://git.kernel.org/stable/c/dd1dda6b8d6e1f4376a5b3055a04f0ecbdb4d6bd	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.