Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-68181

mei: bus: access mei_device under device_lock on cleanup

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: mei: bus: access mei_device under device_lock on cleanup Fix couple of problems in mei_cl_bus_dev_release(): mei_cl_flush_queues() is running without lock. bus->file_list access after mei_dev_bus_put(bus) can become a use-after-free if this was the last reference to bus. Protect queues cleanup and WARN traversal by device lock there to avoid the concurrent access problems. Move WARN traversal before mei_dev_bus_put(bus). This file uses bus variable name for mei_device, adjust code of mei_cl_bus_dev_release() to use bus variable too.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6f2a6ef86b23a30b92ad57981de537bce67bfa45 to < 02e3a755086db847d795f2593ebc45e8ee4f1755affected
  • 24f4ceeaeee7983c07590149556a0e33efe2ec90 to < 441559d4c595f839b39f0ab6a4ae628427c2fd9eaffected
  • 612c8d21ce6e37b73f3106aec7ffa35959d40261 to < c88c030a324c9018b77894a19b2564eb66862020affected
  • 35e8a426b16adbecae7a4e0e3c00fc8d0273db53 to < 59dd34854202d9a3faaa87a85205e553fe7150e1affected
  • 35e8a426b16adbecae7a4e0e3c00fc8d0273db53 to < 7cf79e8d682fe93777268f029668ce5e214237fdaffected
  • 35e8a426b16adbecae7a4e0e3c00fc8d0273db53 to < f112ea910e554d58b4b39a4492b7d302f0f4204faffected
  • 2f29dce5a5ae06a7db32e4491d72269329a86eebaffected
  • 28de6ca5276a94b0589ae1bf026b89fa0eaf14c0affected
  • 6.1.149 to < 6.1.184affected
  • 6.6.103 to < 6.6.148affected
  • 6.12.43 to < 6.12.101affected
  • 6.15.11 to < 6.16affected
  • 6.16.2 to < 6.17affected

Linux Linux

Default version status: affected

  • 6.17affected
  • 0 to < 6.17unaffected
  • 6.1.184 to ≤ 6.1.*unaffected
  • 6.6.148 to ≤ 6.6.*unaffected
  • 6.12.101 to ≤ 6.12.*unaffected
  • 6.18.42 to ≤ 6.18.*unaffected
  • 7.1.6 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References