vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-64471

Bluetooth: btusb: fix use-after-free on registration failure

N/A
Published: July 25, 2026 at 08:51 AM UTC
Updated: August 17, 2026 at 05:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-after-free on registration failure Make sure to release the sibling interfaces in case controller registration fails to avoid use-after-free and double-free when they are eventually disconnected. This issue was reported by Sashiko while reviewing a fix for a wakeup source leak in the btusb probe errors paths.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
2.6.27 ≤ v < 5.10.2612.6.27 ≤ v < 5.15.2122.6.27 ≤ v < 6.1.1782.6.27 ≤ v < 6.12.962.6.27 ≤ v < 6.18.392.6.27 ≤ v < 6.6.1452.6.27 ≤ v < 7.1.42.6.27 ≤ v < 7.22.6.279bfa35fe422c74882e27cc54450a5f76c96aad68
Vendor states this is fixed in 14e02f1449ba425a44dedbec9a21efafb056e09f (fixed)
Vendor states this is fixed in 1ce5012944afaddbda939ec6bae9800fce84abbc (fixed)
Vendor states this is fixed in 468fcdfaeb937163dd250773a9fed17ab1fa203c (fixed)
Vendor states this is fixed in 8db0ce3de78367f61c2970c0f16d9adee8830a23 (fixed)
Vendor states this is fixed in da7d7758fe884b256ddc9fef562e5ddef7952383 (fixed)
Vendor states this is fixed in e09ac7d0c6859a360bf36e7104aef03f88184e0b (fixed)
Vendor states this is fixed in e6313b800da61a26c2fdd5eba0105e197c0ab3bc (fixed)
Vendor states this is fixed in eedc6867ebad73edbfaf9a0a65fbef7115cc4753 (fixed)
Vendor states this is fixed in 2.6.27 (unaffected)
Vendor states this is fixed in 5.10.261 (unaffected)
Vendor states this is fixed in 5.15.212 (unaffected)
Vendor states this is fixed in 6.1.178 (unaffected)
Vendor states this is fixed in 6.12.96 (unaffected)
Vendor states this is fixed in 6.18.39 (unaffected)
Vendor states this is fixed in 6.6.145 (unaffected)
Vendor states this is fixed in 7.1.4 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/e09ac7d0c6859a360bf36e7104aef03f88184e0b
Source: cverecord
https://git.kernel.org/stable/c/468fcdfaeb937163dd250773a9fed17ab1fa203c
Source: cverecord
https://git.kernel.org/stable/c/1ce5012944afaddbda939ec6bae9800fce84abbc
Source: cverecord
https://git.kernel.org/stable/c/e6313b800da61a26c2fdd5eba0105e197c0ab3bc
Source: cverecord
https://git.kernel.org/stable/c/14e02f1449ba425a44dedbec9a21efafb056e09f
Source: cverecord
https://git.kernel.org/stable/c/8db0ce3de78367f61c2970c0f16d9adee8830a23
Source: cverecord
https://git.kernel.org/stable/c/da7d7758fe884b256ddc9fef562e5ddef7952383
Source: cverecord
https://git.kernel.org/stable/c/eedc6867ebad73edbfaf9a0a65fbef7115cc4753

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card