CVE-2026-64144: Bluetooth: btmtk: fix urb->setup_packet leak in error paths
Published Jul 19, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btmtk: fix urb->setuppacket leak in error paths
The setuppacket of control urb is not freed if usbsubmiturb fails or the submitted urb is killed. Add free in these two paths.
Affected Software
9 affected components
Linux Linux kernel
Linux Linux kernel>=5.3<6.6.142
Linux Linux kernel>=6.7<6.12.92
Linux Linux kernel>=6.13<6.18.34
Linux Linux kernel>=6.19<7.0.11
Linux Linux kernel=7.1-rc1
Linux Linux kernel=7.1-rc2
Linux Linux kernel=7.1-rc3
Linux Linux kernel=7.1-rc4
Remediation
Event History
Jul 19, 2026
CVE Published
via MITRE·03:40 PM
Data Sourced
via MITRE·03:40 PM
Description
Data Sourced
via NVD·04:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-64144?
The severity of CVE-2026-64144 is rated at 10, indicating a critical risk level.
2
How do I fix CVE-2026-64144?
To fix CVE-2026-64144, ensure that the Linux kernel is updated to the version that includes the patches resolving this vulnerability.
3
What systems are affected by CVE-2026-64144?
CVE-2026-64144 affects the Bluetooth subsystem within the Linux kernel.
4
What type of vulnerability is CVE-2026-64144?
CVE-2026-64144 is a memory management vulnerability specifically related to resource leaks.
5
When was CVE-2026-64144 published?
CVE-2026-64144 was published on July 19, 2026.