CVE-2026-64470
Last modified
CVE-2026-64470 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-after-free on marvell probe failure Make sure to stop any TX URBs submitted during Marvell OOB wakeup configuration on later probe failures to avoid use-after-free in the completion callback. This issue was reported by Sashiko while reviewing a fix for a wakeup source leak in the btusb probe errors paths..
Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-after-free on marvell probe failure Make sure to stop any TX URBs submitted during Marvell OOB wakeup configuration on later probe failures to avoid use-after-free in the completion callback. This issue was reported by Sashiko while reviewing a fix for a wakeup source leak in the btusb probe errors paths.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= a4ccc9e33d2f01532bcceb621ea06bbf4db6efac, < 1edd524de5cc8143ece9c42c466346983dc5b5ed; >= a4ccc9e33d2f01532bcceb621ea06bbf4db6efac, < 0ccb1cb0a464dab78284c34196cd3e8e18bab4c4; >= a4ccc9e33d2f01532bcceb621ea06bbf4db6efac, < 631de465aba7f8ae46478bf5f598111412e8eff8; >= a4ccc9e33d2f01532bcceb621ea06bbf4db6efac, < 6e1b10df890f4663cb38af9fc1c93d36747b75af; >= a4ccc9e33d2f01532bcceb621ea06bbf4db6efac, < 92c736866244340497a8a65afe2ac25354c2bf5e; >= a4ccc9e33d2f01532bcceb621ea06bbf4db6efac, < a7e941a395711791c7e98d9870c6562c2c9e9ef2; >= a4ccc9e33d2f01532bcceb621ea06bbf4db6efac, < 838c917a2f16eefe68def800ebf48a2af591149a; >= a4ccc9e33d2f01532bcceb621ea06bbf4db6efac, < c5b600a3c05b1a7a110d558df935a8fc8a471c79 |
| Linux | Linux | 4.11 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-64470?
How severe is CVE-2026-64470?
How do I fix CVE-2026-64470?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-64465In the Linux kernel, the following vulnerability has been re…
- CVE-2026-64466In the Linux kernel, the following vulnerability has been re…
- CVE-2026-64467In the Linux kernel, the following vulnerability has been re…8.8
- CVE-2026-64468In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-64469In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-6447The Call for Price for WooCommerce plugin for WordPress is v…4.4
- CVE-2026-64471In the Linux kernel, the following vulnerability has been re…
- CVE-2026-64472In the Linux kernel, the following vulnerability has been re…
- CVE-2026-64473In the Linux kernel, the following vulnerability has been re…
- CVE-2026-64474In the Linux kernel, the following vulnerability has been re…
- CVE-2026-64475In the Linux kernel, the following vulnerability has been re…8.8
- CVE-2026-64476In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-64470?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST