CVE-2026-64144

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-07-19 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix urb->setup_packet leak in error paths The setup_packet of control urb is not freed if usb_submit_urb fails or the submitted urb is killed. Add free in these two paths.

Weakness Classification (1)

Affected Software (12)

VendorProductVersion
Linux Linux a1c49c434e15050b5dafe3b6f5cc732d4f02d657 < ecd8d2531766641958a667829907204066cfb51a
Linux Linux a1c49c434e15050b5dafe3b6f5cc732d4f02d657 < 2a1905730e0c771b999906a7b509722f795563c6
Linux Linux a1c49c434e15050b5dafe3b6f5cc732d4f02d657 < 68c027c2003b0a8a1439d0301c59c6fd1eb3b844
Linux Linux a1c49c434e15050b5dafe3b6f5cc732d4f02d657 < a0f5268c77eb73f84ba7c210ddfc54b1c73ff80c
Linux Linux a1c49c434e15050b5dafe3b6f5cc732d4f02d657 < 0d2572bafea33c7cd1d77c6a25f25ff31a432482
Linux Linux a1c49c434e15050b5dafe3b6f5cc732d4f02d657 < dd1dda6b8d6e1f4376a5b3055a04f0ecbdb4d6bd
Linux Linux 5.3
linux linux_kernel 5.3 – 6.6.142
linux linux_kernel 7.1
linux linux_kernel 7.1
linux linux_kernel 7.1
linux linux_kernel 7.1

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.13%
Raw Score 0.001280
Percentile 2.4%
Date 2026-11-01

EPSS Trend

2026-11-01
0.00128
2026-10-31
0.00128
2026-10-30
0.00127
2026-10-29
0.00127

Intelligence Sources

mitre ref →
nvd ref →