SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-64144

MEDIUM · CVSS 5.5 EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

A memory leak vulnerability exists in the Linux kernel's Bluetooth subsystem, specifically within the btmtk driver, where the setup_packet of control URBs is not properly freed during error handling scenarios. This could lead to increased memory usage and potential denial-of-service conditions if exploited. Organizations using affected Linux distributions with Bluetooth functionality should prioritize patching this vulnerability to mitigate the risk of resource exhaustion.

CVE
CVE-2026-64144
Severity
MEDIUM
CVSS
5.5
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix urb->setup_packet leak in error paths The setup_packet of control urb is not freed if usb_submit_urb fails or the submitted urb is killed. Add free in these two paths.

Related CVEs

Other vulnerabilities affecting the same vendor(s)