Vulnerability in Linux
CVE-2026-64471
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-after-free on registration failure Make sure to release the sibling interfaces in case controller registration fails to avoid use-after-free and double-free when they are eventually disconnected. This issue was reported by Sashiko while reviewing a fix for a wakeup source leak in the btusb probe errors paths.
EPSS: 0.002 (8.1th percentile) — read the EPSS interpretation.
Affected products
- Linux — versions 7.2-rc1, 2.6.27, 6.6.145