CVE-2026-68181
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
mei: bus: access mei_device under device_lock on cleanup
In the Linux kernel, the following vulnerability has been resolved: mei: bus: access mei_device under device_lock on cleanup Fix couple of problems in mei_cl_bus_dev_release(): mei_cl_flush_queues() is running without lock. bus->file_list access after mei_dev_bus_put(bus) can become a use-after-free if this was the last reference to bus. Protect queues cleanup and WARN traversal by device lock there to avoid the concurrent access problems. Move WARN traversal before mei_dev_bus_put(bus). This file uses bus variable name for mei_device, adjust code of mei_cl_bus_dev_release() to use bus variable too.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6f2a6ef86b23a30b92ad57981de537bce67bfa45 | affected | git | 02e3a755086db847d795f2593ebc45e8ee4f1755 | Unavailable | None listed |
| 24f4ceeaeee7983c07590149556a0e33efe2ec90 | affected | git | 441559d4c595f839b39f0ab6a4ae628427c2fd9e | Unavailable | None listed |
| 612c8d21ce6e37b73f3106aec7ffa35959d40261 | affected | git | c88c030a324c9018b77894a19b2564eb66862020 | Unavailable | None listed |
| 35e8a426b16adbecae7a4e0e3c00fc8d0273db53 | affected | git | 59dd34854202d9a3faaa87a85205e553fe7150e1 | Unavailable | None listed |
| 35e8a426b16adbecae7a4e0e3c00fc8d0273db53 | affected | git | 7cf79e8d682fe93777268f029668ce5e214237fd | Unavailable | None listed |
| 35e8a426b16adbecae7a4e0e3c00fc8d0273db53 | affected | git | f112ea910e554d58b4b39a4492b7d302f0f4204f | Unavailable | None listed |
| 2f29dce5a5ae06a7db32e4491d72269329a86eeb | affected | git | Unavailable | Unavailable | None listed |
| 28de6ca5276a94b0589ae1bf026b89fa0eaf14c0 | affected | git | Unavailable | Unavailable | None listed |
| 6.1.149 | affected | semver | 6.1.184 | Unavailable | None listed |
| 6.6.103 | affected | semver | 6.6.148 | Unavailable | None listed |
| 6.12.43 | affected | semver | 6.12.101 | Unavailable | None listed |
| 6.15.11 | affected | semver | 6.16 | Unavailable | None listed |
| 6.16.2 | affected | semver | 6.17 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.17 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 6.17 | Unavailable | None listed |
| 6.1.184 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.148 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.101 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.42 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 7.1.6 | unaffected | semver | Unavailable | 7.1.* | None listed |
| 7.2 | unaffected | original_commit_for_fix | Unavailable | * | None listed |