CVE-2026-64471

Summary

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btusb: fix use-after-free on registration failure

Make sure to release the sibling interfaces in case controller registration fails to avoid use-after-free and double-free when they are eventually disconnected.

This issue was reported by Sashiko while reviewing a fix for a wakeup source leak in the btusb probe errors paths.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux9bfa35fe422c74882e27cc54450a5f76c96aad68 < e09ac7d0c6859a360bf36e7104aef03f88184e0baffected
LinuxLinux9bfa35fe422c74882e27cc54450a5f76c96aad68 < 468fcdfaeb937163dd250773a9fed17ab1fa203caffected
LinuxLinux9bfa35fe422c74882e27cc54450a5f76c96aad68 < 1ce5012944afaddbda939ec6bae9800fce84abbcaffected
LinuxLinux9bfa35fe422c74882e27cc54450a5f76c96aad68 < e6313b800da61a26c2fdd5eba0105e197c0ab3bcaffected
LinuxLinux9bfa35fe422c74882e27cc54450a5f76c96aad68 < 14e02f1449ba425a44dedbec9a21efafb056e09faffected
LinuxLinux9bfa35fe422c74882e27cc54450a5f76c96aad68 < 8db0ce3de78367f61c2970c0f16d9adee8830a23affected
LinuxLinux9bfa35fe422c74882e27cc54450a5f76c96aad68 < da7d7758fe884b256ddc9fef562e5ddef7952383affected
LinuxLinux9bfa35fe422c74882e27cc54450a5f76c96aad68 < eedc6867ebad73edbfaf9a0a65fbef7115cc4753affected
LinuxLinux2.6.27affected
LinuxLinux0 < 2.6.27unaffected
LinuxLinux5.10.261 <= 5.10.*unaffected
LinuxLinux5.15.212 <= 5.15.*unaffected
LinuxLinux6.1.178 <= 6.1.*unaffected
LinuxLinux6.6.145 <= 6.6.*unaffected
LinuxLinux6.12.96 <= 6.12.*unaffected
LinuxLinux6.18.39 <= 6.18.*unaffected
LinuxLinux7.1.4 <= 7.1.*unaffected
LinuxLinux7.2-rc1 <= *unaffected

Weaknesses

References