CVE-2026-74301

Received Received - Intake

Bluetooth URB Leak in Linux Kernel Bluetooth Stack

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path When btmtk_isopkt_pad() fails, the previously allocated URB is not freed, leaking the urb structure. Add usb_free_urb() before returning the error.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-74301

EUVD

EUVD-2026-59448

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a Linux kernel vulnerability where a Bluetooth driver (btmtk) fails to free a USB Request Block (URB) when an error occurs during packet padding. This leads to a memory leak in the urb structure.

Detection Guidance

This vulnerability is specific to the Linux kernel's Bluetooth mtk driver and involves a URB leak during error handling. Detection requires checking for memory leaks in Bluetooth-related kernel modules or monitoring for failed btmtk_isopkt_pad() calls. No direct network detection commands exist; focus on kernel logs and memory usage.

Impact Analysis

The impact is likely limited to Bluetooth functionality on affected Linux systems. It may cause resource exhaustion over time due to leaked memory, potentially leading to system instability or crashes during Bluetooth operations.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It involves a memory leak in the Linux kernel's Bluetooth subsystem, which could impact system stability but does not involve data breaches or unauthorized access to sensitive information.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for CVE-2026-74301. This resolves the URB leak in the btmtk driver.

Hi! I’m here to help you understand CVE-2026-74301. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70