Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-68227

media: cx231xx: fix devres lifetime

Description

In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: fix devres lifetime USB drivers bind to USB interfaces and any device managed resources should have their lifetime tied to the interface rather than parent USB device. This avoids issues like memory leaks when drivers are unbound without their devices being physically disconnected (e.g. on probe deferral or configuration changes). Fix the driver state lifetime so that it is released on driver unbind.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 184a82784d50ad82aadc3917a3bdd8314a0e9b9b to < 1770fc4e2b47b1185e6f688d4012bc91f7543854affected
  • 184a82784d50ad82aadc3917a3bdd8314a0e9b9b to < c07f535bcdd3f956d4c32085535368f46ba99ba0affected
  • 184a82784d50ad82aadc3917a3bdd8314a0e9b9b to < 0ea4b6fd49f7bed3a7e2b8734c15d9699dabe26faffected
  • 184a82784d50ad82aadc3917a3bdd8314a0e9b9b to < a373f1a5137e96549a795e7fb9efb5de0ae1d065affected
  • 184a82784d50ad82aadc3917a3bdd8314a0e9b9b to < c5ccb01eb1107acb6aab8ce8fe5a523f215c837eaffected
  • 184a82784d50ad82aadc3917a3bdd8314a0e9b9b to < f468b7ee5d6332b01e6c538179a4c720e6dae93baffected
  • 184a82784d50ad82aadc3917a3bdd8314a0e9b9b to < e797e252bfb3d0d4b3d38e4faef817e05869c240affected
  • 184a82784d50ad82aadc3917a3bdd8314a0e9b9b to < 7d6358ab02866e5b7ed8d3a00805297617bbb0ecaffected

Linux Linux

Default version status: affected

  • 3.17affected
  • 0 to < 3.17unaffected
  • 5.10.265 to ≤ 5.10.*unaffected
  • 5.15.216 to ≤ 5.15.*unaffected
  • 6.1.183 to ≤ 6.1.*unaffected
  • 6.6.148 to ≤ 6.6.*unaffected
  • 6.12.101 to ≤ 6.12.*unaffected
  • 6.18.42 to ≤ 6.18.*unaffected
  • 7.1.6 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References