CVE-2026-64471None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-after-free on registration failure Make sure to release the sibling interfaces in case controller registration fails to avoid use-after-free …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Nov 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btusb: fix use-after-free on registration failure
Make sure to release the sibling interfaces in case controller registration fails to avoid use-after-free and double-free when they are eventually disconnected.
This issue was reported by Sashiko while reviewing a fix for a wakeup source leak in the btusb probe errors paths.
Linux >= 9bfa35fe422c74882e27cc54450a5f76c96aad68 < e09ac7d0c6859a360bf36e7104aef03f88184e0bLinux >= 9bfa35fe422c74882e27cc54450a5f76c96aad68 < 468fcdfaeb937163dd250773a9fed17ab1fa203cLinux >= 9bfa35fe422c74882e27cc54450a5f76c96aad68 < 1ce5012944afaddbda939ec6bae9800fce84abbcLinux >= 9bfa35fe422c74882e27cc54450a5f76c96aad68 < e6313b800da61a26c2fdd5eba0105e197c0ab3bcLinux >= 9bfa35fe422c74882e27cc54450a5f76c96aad68 < 14e02f1449ba425a44dedbec9a21efafb056e09fLinux >= 9bfa35fe422c74882e27cc54450a5f76c96aad68 < 8db0ce3de78367f61c2970c0f16d9adee8830a23Linux >= 9bfa35fe422c74882e27cc54450a5f76c96aad68 < da7d7758fe884b256ddc9fef562e5ddef7952383Linux >= 9bfa35fe422c74882e27cc54450a5f76c96aad68 < eedc6867ebad73edbfaf9a0a65fbef7115cc4753Linux 2.6.27Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99284Nonenet: skbuff: propagate shared-frag marker in skb_zerocopy()
CVE-2026-99283Nonenetfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
CVE-2026-99272Nonesmb: client: validate the data area in SMB2_read()
CVE-2026-99271NoneALSA: line6: Clear prev_fbuf on capture buffer release
CVE-2026-99273Noneksmbd: reserve space for the UTF-16 terminator in stream info
CVE-2026-99275Nonesmb: client: reject short SESSION_SETUP responses