CVE-2026-64144

MediumCVSS 5.5/10Last modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btmtk: fix urb->setup_packet leak in error paths

The setup_packet of control urb is not freed if usb_submit_urb fails or the submitted urb is killed. Add free in these two paths.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= a1c49c434e15050b5dafe3b6f5cc732d4f02d657, < ecd8d2531766641958a667829907204066cfb51a; >= a1c49c434e15050b5dafe3b6f5cc732d4f02d657, < 2a1905730e0c771b999906a7b509722f795563c6; >= a1c49c434e15050b5dafe3b6f5cc732d4f02d657, < 68c027c2003b0a8a1439d0301c59c6fd1eb3b844; >= a1c49c434e15050b5dafe3b6f5cc732d4f02d657, < a0f5268c77eb73f84ba7c210ddfc54b1c73ff80c; >= a1c49c434e15050b5dafe3b6f5cc732d4f02d657, < 0d2572bafea33c7cd1d77c6a25f25ff31a432482; >= a1c49c434e15050b5dafe3b6f5cc732d4f02d657, < dd1dda6b8d6e1f4376a5b3055a04f0ecbdb4d6bd
LinuxLinux5.3

References

Timeline

Published
Jul 19, 2026
Last modified
Nov 6, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-641457.8In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix dma_buffer leak on bus acquire failure wilc_wlan_fCVE-2026-641465.5In the Linux kernel, the following vulnerability has been resolved: erofs: fix metabuf leak in inode xattr initialization commit bb88e8da0CVE-2026-641475.5In the Linux kernel, the following vulnerability has been resolved: pds_core: fix debugfs_lookup dentry leak and error handling debugfs_loCVE-2026-641487.5In the Linux kernel, the following vulnerability has been resolved: pds_core: fix error handling in pdsc_devcmd_wait Fix two cases where pCVE-2026-641495.5In the Linux kernel, the following vulnerability has been resolved: dma-mapping: move dma_map_resource() sanity check into debug code dma_CVE-2026-64156.4The Advanced Custom Fields: Font Awesome plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 5CVE-2026-641509.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: release local_lock before re-enabling softirqs QCVE-2026-641518.4In the Linux kernel, the following vulnerability has been resolved: iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap Sashiko poinCVE-2026-641527.8In the Linux kernel, the following vulnerability has been resolved: iommu: Handle unmap error when iommu_debug is enabled Sashiko noticed CVE-2026-641538.8In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN ComCVE-2026-641545.5In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() In a6xx_gpu_inCVE-2026-641555.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix error path leaks in some WMI WOW calls Fix two insta
CVE-2026-64144: Medium severity, CVSS 5.5 | Vulnix