Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-68180

intel_th: fix MSC output device reference leak

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: intel_th: fix MSC output device reference leak intel_th_output_open() looks up the output device with bus_find_device_by_devt(), which returns the device with a reference that must be dropped after use. commit 95fc36a234da ("intel_th: fix device leak on output open()") attempted to drop the reference from intel_th_output_release(). However, a successful open replaces file->f_op with the output driver file operations before returning, so close runs the output driver release callback instead. For MSC outputs, close runs intel_th_msc_release(), which only removes the per-file iterator and does not drop the device reference taken by intel_th_output_open(). Consequently, every successful MSC output open leaks one device reference. Drop the device reference from intel_th_msc_release(), which is the release path actually used for MSC output files. Remove the now-unused intel_th_output_release() callback from intel_th_output_fops.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • af4b9467296b9a16ebc008147238070236982b6d to < 12ad4fad748e6e563ff4480f03b89134a41b5c37affected
  • 64015cbf06e8bb75b81ae95b997e847b55280f7f to < df55842fddbcdb80e6dd16680439c0f780ed592eaffected
  • b71e64ef7ff9443835d1333e3e80ab1e49e5209f to < 141641a70ed337e54487f766ede745fc2ce44c42affected
  • bf7785434b5d05d940d936b78925080950bd54dd to < ddcf2064d7ec5a8c9afa7cb74442320e443502bcaffected
  • 0fca16c5591534cc1fec8b6181277ee3a3d0f26c to < 26e27b8dcef1e4df6f30d8f25b3304a506d482b3affected
  • f9b059bda4276f2bb72cb98ec7875a747f042ea2 to < caba30eb8bd321c465ecfc7d850ee85f5b353496affected
  • 95fc36a234da24bbc5f476f8104a5a15f99ed3e3 to < c3a28f9cb82425fe0835048ed3677f321e780691affected
  • 95fc36a234da24bbc5f476f8104a5a15f99ed3e3 to < 761b785a0cfbce43761227bc42a7f984f31f8921affected
  • 5.10.249 to < 5.10.265affected
  • 5.15.199 to < 5.15.216affected
  • 6.1.162 to < 6.1.183affected
  • 6.6.122 to < 6.6.148affected
  • 6.12.68 to < 6.12.101affected
  • 6.18.8 to < 6.18.42affected

Linux Linux

Default version status: affected

  • 6.19affected
  • 0 to < 6.19unaffected
  • 5.10.265 to ≤ 5.10.*unaffected
  • 5.15.216 to ≤ 5.15.*unaffected
  • 6.1.183 to ≤ 6.1.*unaffected
  • 6.6.148 to ≤ 6.6.*unaffected
  • 6.12.101 to ≤ 6.12.*unaffected
  • 6.18.42 to ≤ 6.18.*unaffected
  • 7.1.6 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References