CVE-2026-74301: Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btmtk: fix URB leak in allocmtkintrurb error path
When btmtkisopktpad() fails, the previously allocated URB is not freed, leaking the urb structure. Add usbfreeurb() before returning the error.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74301?
CVE-2026-74301 has a severity rating of 10, indicating a critical risk level.
How do I fix CVE-2026-74301?
To fix CVE-2026-74301, ensure that usb_free_urb() is called before returning an error in the alloc_mtk_intr_urb function.
What systems are affected by CVE-2026-74301?
CVE-2026-74301 affects the Linux kernel with Bluetooth btmtk functionality.
What could be the impact of CVE-2026-74301 if exploited?
If exploited, CVE-2026-74301 may lead to resource leakage, potentially resulting in degraded system performance or stability.
Is there a patch available for CVE-2026-74301?
Yes, a patch is available as part of the kernel updates that resolve the URB leak in the error handling.