CVE-2026-74301

A flaw was found in the Linux kernel's Bluetooth driver. An error in handling Bluetooth packets can cause a memory leak, where a data structure is not properly released. This continuous leakage of memory could potentially lead to system instability or a denial of service.

A low impact flaw was found in the Linux kernel's MediaTek USB Bluetooth (btmtk) driver, affecting Red Hat Enterprise Linux 9 and 10 and Red Hat In-Vehicle OS 2. When a Bluetooth ISO packet is prepared for transmission and btmtk_isopkt_pad() fails, the URB previously allocated in alloc_mtk_intr_urb() is not freed, leaking kernel memory each time this error path is hit. Repeatedly triggering this condition on systems with affected MediaTek Bluetooth hardware can gradually exhaust kernel memory, potentially causing system instability or a denial of service. The flaw impacts availability only, with no effect on confidentiality or integrity. The vulnerable code was introduced into Red Hat Enterprise Linux through the backport of MediaTek Bluetooth ISO data transmission support in RHEL 9.6, so RHEL 6, 7, and 8 and the RHEL 9.2 and 9.4 update streams are not affected because the vulnerable code is not present. For the affected streams, the fix is deferred to a future update given the low impact of this flaw; the residual risk is limited to gradual kernel memory consumption that could eventually degrade system availability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.