Bluetooth Vulnerability in Linux Kernel Affects Multiple Versions

CVE-2026-64144

What is CVE-2026-64144?

A vulnerability in the Linux kernel's Bluetooth implementation could lead to memory management issues. Specifically, if the usb_submit_urb function fails or if the submitted URB is terminated, the setup_packet associated with control URBs may not be released correctly. This oversight can result in a memory leak, potentially affecting system stability and performance. The issue has been addressed in subsequent updates, ensuring proper memory deallocation in error scenarios.

References