In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-after-free on registration failure Make sure to… (CVE-2026-64471)
Source GCVE Database
No CVSS score published yet
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 7% of CVEs
What to do
AI-suggested
A fix has been implemented in the Linux kernel to properly release sibling interfaces on controller registration failure in the btusb driver. Users should apply the official kernel updates that include this fix. Patch status is not explicitly confirmed here; check the Linux kernel vendor advisory or source repository for the specific fixed versions and apply updates accordingly.
Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-after-free on registration failure Make sure to release the sibling interfaces in case controller registration fails to avoid use-after-free and double-free when they are eventually disconnected. This issue was reported by Sashiko while reviewing a fix for a wakeup source leak in the btusb probe errors paths.
References
- nvd.nist.gov/vuln/detail/CVE-2026-64471 (opens in a new tab)
- git.kernel.org/stable/c/14e02f1449ba425a44dedbec9a21efafb056e09f (opens in a new tab)
- git.kernel.org/stable/c/1ce5012944afaddbda939ec6bae9800fce84abbc (opens in a new tab)
- git.kernel.org/stable/c/468fcdfaeb937163dd250773a9fed17ab1fa203c (opens in a new tab)
- git.kernel.org/stable/c/8db0ce3de78367f61c2970c0f16d9adee8830a23 (opens in a new tab)
- git.kernel.org/stable/c/da7d7758fe884b256ddc9fef562e5ddef7952383 (opens in a new tab)
- git.kernel.org/stable/c/e09ac7d0c6859a360bf36e7104aef03f88184e0b (opens in a new tab)
- git.kernel.org/stable/c/e6313b800da61a26c2fdd5eba0105e197c0ab3bc (opens in a new tab)
- git.kernel.org/stable/c/eedc6867ebad73edbfaf9a0a65fbef7115cc4753 (opens in a new tab)