CVE-2026-74301 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path

When btmtk_isopkt_pad() fails, the previously allocated URB is not freed,
leaking the urb structure. Add usb_free_urb() before returning the error.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux Subscribe	Linux Kernel Subscribe

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://git.kernel.org/stable/c/2643524743b9cc3c6f5f34cde2a8c627d793f21c
https://git.kernel.org/stable/c/4e354991da5890d5ce7bfea3f66fb897ae301756
https://git.kernel.org/stable/c/7f206a8d8d82296aa2d30bf5f3e5bb73fc44591d
https://git.kernel.org/stable/c/f396f4005180928cd9e15e352a6512865d3bc908

History

Sat, 15 Aug 2026 06:15:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path When btmtk_isopkt_pad() fails, the previously allocated URB is not freed, leaking the urb structure. Add usb_free_urb() before returning the error.
Title		Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/2643524743b9cc3c6f5f34cde2a8c627d793f21c https://git.kernel.org/stable/c/4e354991da5890d5ce7bfea3f66fb897ae301756 https://git.kernel.org/stable/c/7f206a8d8d82296aa2d30bf5f3e5bb73fc44591d https://git.kernel.org/stable/c/f396f4005180928cd9e15e352a6512865d3bc908

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-15T05:58:03.991Z

Updated: 2026-08-15T05:58:03.991Z

Reserved: 2026-08-15T05:44:03.882Z

Link: CVE-2026-74301

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-15T06:22:29.720

Modified: 2026-08-15T06:22:29.720

Link: CVE-2026-74301

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-74301", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-15T05:44:03.882Z", "datePublished": "2026-08-15T05:58:03.991Z", "dateUpdated": "2026-08-15T05:58:03.991Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-15T05:58:03.991Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path\n\nWhen btmtk_isopkt_pad() fails, the previously allocated URB is not freed,\nleaking the urb structure. Add usb_free_urb() before returning the error."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/bluetooth/btmtk.c"], "versions": [{"version": "ceac1cb0259de682d78f5c784ef8e0b13022e9d9", "lessThan": "2643524743b9cc3c6f5f34cde2a8c627d793f21c", "status": "affected", "versionType": "git"}, {"version": "ceac1cb0259de682d78f5c784ef8e0b13022e9d9", "lessThan": "7f206a8d8d82296aa2d30bf5f3e5bb73fc44591d", "status": "affected", "versionType": "git"}, {"version": "ceac1cb0259de682d78f5c784ef8e0b13022e9d9", "lessThan": "4e354991da5890d5ce7bfea3f66fb897ae301756", "status": "affected", "versionType": "git"}, {"version": "ceac1cb0259de682d78f5c784ef8e0b13022e9d9", "lessThan": "f396f4005180928cd9e15e352a6512865d3bc908", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/bluetooth/btmtk.c"], "versions": [{"version": "6.11", "status": "affected"}, {"version": "0", "lessThan": "6.11", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.97", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.40", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2-rc1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11", "versionEndExcluding": "6.12.97"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11", "versionEndExcluding": "6.18.40"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11", "versionEndExcluding": "7.2-rc1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/2643524743b9cc3c6f5f34cde2a8c627d793f21c"}, {"url": "https://git.kernel.org/stable/c/7f206a8d8d82296aa2d30bf5f3e5bb73fc44591d"}, {"url": "https://git.kernel.org/stable/c/4e354991da5890d5ce7bfea3f66fb897ae301756"}, {"url": "https://git.kernel.org/stable/c/f396f4005180928cd9e15e352a6512865d3bc908"}], "title": "Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path", "x_generator": {"engine": "bippy-1.2.0"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/bluetooth/btmtk.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "2643524743b9cc3c6f5f34cde2a8c627d793f21c", "status": "affected", "version": "ceac1cb0259de682d78f5c784ef8e0b13022e9d9", "versionType": "git"}, {"lessThan": "7f206a8d8d82296aa2d30bf5f3e5bb73fc44591d", "status": "affected", "version": "ceac1cb0259de682d78f5c784ef8e0b13022e9d9", "versionType": "git"}, {"lessThan": "4e354991da5890d5ce7bfea3f66fb897ae301756", "status": "affected", "version": "ceac1cb0259de682d78f5c784ef8e0b13022e9d9", "versionType": "git"}, {"lessThan": "f396f4005180928cd9e15e352a6512865d3bc908", "status": "affected", "version": "ceac1cb0259de682d78f5c784ef8e0b13022e9d9", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/bluetooth/btmtk.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.11"}, {"lessThan": "6.11", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.97", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.40", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2-rc1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path\n\nWhen btmtk_isopkt_pad() fails, the previously allocated URB is not freed,\nleaking the urb structure. Add usb_free_urb() before returning the error."}], "id": "CVE-2026-74301", "lastModified": "2026-08-15T06:22:29.720", "metrics": {}, "published": "2026-08-15T06:22:29.720", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/2643524743b9cc3c6f5f34cde2a8c627d793f21c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/4e354991da5890d5ce7bfea3f66fb897ae301756"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/7f206a8d8d82296aa2d30bf5f3e5bb73fc44591d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f396f4005180928cd9e15e352a6512865d3bc908"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}