In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btusb: fix use-after-free on registration failure

Make sure to release the sibling interfaces in case controller
registration fails to avoid use-after-free and double-free when they are
eventually disconnected.

This issue was reported by Sashiko while reviewing a fix for a wakeup
source leak in the btusb probe errors paths.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
9bfa35fe422c74882e27cc54450a5f76c96aad68 affected < e09ac7d0c6859a360bf36e7104aef03f88184e0b
9bfa35fe422c74882e27cc54450a5f76c96aad68 affected < 468fcdfaeb937163dd250773a9fed17ab1fa203c
9bfa35fe422c74882e27cc54450a5f76c96aad68 affected < 1ce5012944afaddbda939ec6bae9800fce84abbc
9bfa35fe422c74882e27cc54450a5f76c96aad68 affected < e6313b800da61a26c2fdd5eba0105e197c0ab3bc
9bfa35fe422c74882e27cc54450a5f76c96aad68 affected < 14e02f1449ba425a44dedbec9a21efafb056e09f
9bfa35fe422c74882e27cc54450a5f76c96aad68 affected < 8db0ce3de78367f61c2970c0f16d9adee8830a23
9bfa35fe422c74882e27cc54450a5f76c96aad68 affected < da7d7758fe884b256ddc9fef562e5ddef7952383
9bfa35fe422c74882e27cc54450a5f76c96aad68 affected < eedc6867ebad73edbfaf9a0a65fbef7115cc4753
Linux Linux affected
Version Status Constraints
2.6.27 affected —
0 unaffected < 2.6.27
5.10.261 unaffected ≤ 5.10.*
5.15.212 unaffected ≤ 5.15.*
6.1.178 unaffected ≤ 6.1.*
6.6.145 unaffected ≤ 6.6.*
6.12.96 unaffected ≤ 6.12.*
6.18.39 unaffected ≤ 6.18.*
7.1.4 unaffected ≤ 7.1.*
7.2-rc1 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/14e02f1449ba425a44dedbec9a21efafb056e09f cve-icon
https://git.kernel.org/stable/c/1ce5012944afaddbda939ec6bae9800fce84abbc cve-icon
https://git.kernel.org/stable/c/468fcdfaeb937163dd250773a9fed17ab1fa203c cve-icon
https://git.kernel.org/stable/c/8db0ce3de78367f61c2970c0f16d9adee8830a23 cve-icon
https://git.kernel.org/stable/c/da7d7758fe884b256ddc9fef562e5ddef7952383 cve-icon
https://git.kernel.org/stable/c/e09ac7d0c6859a360bf36e7104aef03f88184e0b cve-icon
https://git.kernel.org/stable/c/e6313b800da61a26c2fdd5eba0105e197c0ab3bc cve-icon
https://git.kernel.org/stable/c/eedc6867ebad73edbfaf9a0a65fbef7115cc4753 cve-icon
History

Sat, 25 Jul 2026 09:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-after-free on registration failure Make sure to release the sibling interfaces in case controller registration fails to avoid use-after-free and double-free when they are eventually disconnected. This issue was reported by Sashiko while reviewing a fix for a wakeup source leak in the btusb probe errors paths.
Title Bluetooth: btusb: fix use-after-free on registration failure
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-07-25T08:51:35.245Z

Reserved: 2026-07-19T15:36:31.790Z

Link: CVE-2026-64471

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.