CVE-2026-64470
Received Received - Intake

Bluetooth Use-After-Free in Linux Kernel btusb Driver

Publication date: 2026-07-25

Last updated on: 2026-07-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-after-free on marvell probe failure Make sure to stop any TX URBs submitted during Marvell OOB wakeup configuration on later probe failures to avoid use-after-free in the completion callback. This issue was reported by Sashiko while reviewing a fix for a wakeup source leak in the btusb probe errors paths.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-25
Last Modified
2026-07-25
Generated
2026-07-25
AI Q&A
2026-07-25
EPSS Evaluated
N/A
NVD
CVE-2026-64470
EUVD
EUVD-2026-48814

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a use-after-free issue in the Bluetooth USB driver (btusb) during Marvell OOB wakeup configuration. When probe failures occur, the driver fails to stop submitted TX URBs, leading to potential memory corruption when the completion callback runs after the driver has been freed.

Impact Analysis

This vulnerability could cause system instability or crashes due to memory corruption. An attacker with local access might exploit it to execute arbitrary code or escalate privileges. It primarily affects systems using Bluetooth USB adapters with Marvell chipsets.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for CVE-2026-64470. This vulnerability affects the Bluetooth subsystem, specifically the btusb driver for Marvell devices.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64470. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart