CVE-2026-74301

{"id": "CVE-2026-74301", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "ceac1cb0259de682d78f5c784ef8e0b13022e9d9", "lessThan": "2643524743b9cc3c6f5f34cde2a8c627d793f21c", "versionType": "git"}, {"status": "affected", "version": "ceac1cb0259de682d78f5c784ef8e0b13022e9d9", "lessThan": "7f206a8d8d82296aa2d30bf5f3e5bb73fc44591d", "versionType": "git"}, {"status": "affected", "version": "ceac1cb0259de682d78f5c784ef8e0b13022e9d9", "lessThan": "4e354991da5890d5ce7bfea3f66fb897ae301756", "versionType": "git"}, {"status": "affected", "version": "ceac1cb0259de682d78f5c784ef8e0b13022e9d9", "lessThan": "f396f4005180928cd9e15e352a6512865d3bc908", "versionType": "git"}], "programFiles": ["drivers/bluetooth/btmtk.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.11"}, {"status": "unaffected", "version": "0", "lessThan": "6.11", "versionType": "semver"}, {"status": "unaffected", "version": "6.12.97", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.40", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.5", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/bluetooth/btmtk.c"], "defaultStatus": "affected"}]}], "published": "2026-08-15T06:22:29.720", "references": [{"url": "https://git.kernel.org/stable/c/2643524743b9cc3c6f5f34cde2a8c627d793f21c", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/4e354991da5890d5ce7bfea3f66fb897ae301756", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/7f206a8d8d82296aa2d30bf5f3e5bb73fc44591d", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/f396f4005180928cd9e15e352a6512865d3bc908", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path\n\nWhen btmtk_isopkt_pad() fails, the previously allocated URB is not freed,\nleaking the urb structure. Add usb_free_urb() before returning the error."}], "lastModified": "2026-08-17T06:19:24.220", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}