Not yet scoredPublished Jul 25, 2026

CVE-2026-64470Bluetooth: btusb: fix use-after-free on marvell probe failure

Updated under an hour ago (Oct 27, 2026, 3:40 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-after-free on marvell probe failure Make sure to stop any TX URBs submitted during Marvell OOB wakeup configuration on later probe failures to avoid use-after-free in the completion callback. This issue was reported by Sashiko while reviewing a fix for a wakeup source leak in the btusb probe errors paths.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Aug 17, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from a4ccc9e33d2f01532bcceb621ea06bbf4db6efac before 1edd524de5cc8143ece9c42c466346983dc5b5ed; from a4ccc9e33d2f01532bcceb621ea06bbf4db6efac before 0ccb1cb0a464dab78284c34196cd3e8e18bab4c4; from a4ccc9e33d2f01532bcceb621ea06bbf4db6efac before 631de465aba7f8ae46478bf5f598111412e8eff8; from a4ccc9e33d2f01532bcceb621ea06bbf4db6efac before 6e1b10df890f4663cb38af9fc1c93d36747b75af; from a4ccc9e33d2f01532bcceb621ea06bbf4db6efac before 92c736866244340497a8a65afe2ac25354c2bf5e; from a4ccc9e33d2f01532bcceb621ea06bbf4db6efac before a7e941a395711791c7e98d9870c6562c2c9e9ef2; from a4ccc9e33d2f01532bcceb621ea06bbf4db6efac before 838c917a2f16eefe68def800ebf48a2af591149a; from a4ccc9e33d2f01532bcceb621ea06bbf4db6efac before c5b600a3c05b1a7a110d558df935a8fc8a471c79	CNA record

References

References

https://git.kernel.org/stable/c/1edd524de5cc8143ece9c42c466346983dc5b5ed
https://git.kernel.org/stable/c/0ccb1cb0a464dab78284c34196cd3e8e18bab4c4
https://git.kernel.org/stable/c/631de465aba7f8ae46478bf5f598111412e8eff8
https://git.kernel.org/stable/c/6e1b10df890f4663cb38af9fc1c93d36747b75af
https://git.kernel.org/stable/c/92c736866244340497a8a65afe2ac25354c2bf5e
https://git.kernel.org/stable/c/a7e941a395711791c7e98d9870c6562c2c9e9ef2
https://git.kernel.org/stable/c/838c917a2f16eefe68def800ebf48a2af591149a
https://git.kernel.org/stable/c/c5b600a3c05b1a7a110d558df935a8fc8a471c79

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.