Back to CVE records
Not yet scoredPublished Aug 15, 2026

CVE-2026-74301Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path

Updated under an hour ago ()

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path When btmtk_isopkt_pad() fails, the previously allocated URB is not freed, leaking the urb structure. Add usb_free_urb() before returning the error.

CVSS
Not yet scored
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Received
Record last updated
Aug 17, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
from ceac1cb0259de682d78f5c784ef8e0b13022e9d9 before 2643524743b9cc3c6f5f34cde2a8c627d793f21c; from ceac1cb0259de682d78f5c784ef8e0b13022e9d9 before 7f206a8d8d82296aa2d30bf5f3e5bb73fc44591d; from ceac1cb0259de682d78f5c784ef8e0b13022e9d9 before 4e354991da5890d5ce7bfea3f66fb897ae301756; from ceac1cb0259de682d78f5c784ef8e0b13022e9d9 before f396f4005180928cd9e15e352a6512865d3bc908
CNA record

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.