What’s Vulnerable › Vulnerabilities

CVE-2026-74301: Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-15 · updated 2026-08-17

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path When btmtk_isopkt_pad() fails, the previously allocated URB is not freed, leaking the urb structure. Add usb_free_urb() before returning the error.

Affected products

• Linux kernel: 6.11 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2643524743b9cc3c6f5f34cde2a8c627d793f21c
• https://git.kernel.org/stable/c/4e354991da5890d5ce7bfea3f66fb897ae301756
• https://git.kernel.org/stable/c/7f206a8d8d82296aa2d30bf5f3e5bb73fc44591d
• https://git.kernel.org/stable/c/f396f4005180928cd9e15e352a6512865d3bc908

Get alerted when CVE-2026-74301 or the next vulnerability affects your stack