CVE-2026-64144
kernel: Bluetooth: btmtk: fix urb->setup_packet leak in error paths
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 19, 2026
Updated · August 19, 2026
Description
A flaw was found in the Linux kernel's Bluetooth MediaTek (btmtk) driver. This vulnerability allows a local attacker to cause a memory leak by triggering specific error paths during Universal Serial Bus (USB) Bluetooth operations. The setup_packet of a control urb (USB Request Block) is not properly freed when usb_submit_urb fails or the urb is terminated. Repeated exploitation of this flaw could lead to resource exhaustion, resulting in a Denial of Service (DoS) condition for the system.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime