CVE-2026-68084staging: vme_user: fix location monitor leak in tsi148 bridge
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: staging: vme_user: fix location monitor leak in tsi148 bridge tsi148_probe() allocates a location monitor resource and links it into tsi148_bridge->lm_resources. The probe error path frees this list, but tsi148_remove() only frees the dma, slave and master resource lists, so the location monitor resource is leaked on device unbind or module unload. Free the lm_resources list in tsi148_remove() as well, before tsi148_bridge is freed.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from d22b8ed9a3b0a157b732580258ec16b729265953 before 18be0ad31b161a8b6fbc90d14355ad40c061b6b0; from d22b8ed9a3b0a157b732580258ec16b729265953 before eef048dd77ebfbf99d7c28f9e9dd331d2af7b6f6; from d22b8ed9a3b0a157b732580258ec16b729265953 before 36902ab588ccc2fa07994adf6c5f51cbfe379177; from d22b8ed9a3b0a157b732580258ec16b729265953 before e3ceafa6d8ee6b3a0f7fabe7a551fda909edbd46; from d22b8ed9a3b0a157b732580258ec16b729265953 before c6cda17e98545980e42291fc4282daa8a8ebe384; from d22b8ed9a3b0a157b732580258ec16b729265953 before 151edde741f8bc7f2931c5f44ab376d32b0c8beb | CNA record |
References
- https://git.kernel.org/stable/c/18be0ad31b161a8b6fbc90d14355ad40c061b6b0
- https://git.kernel.org/stable/c/eef048dd77ebfbf99d7c28f9e9dd331d2af7b6f6
- https://git.kernel.org/stable/c/36902ab588ccc2fa07994adf6c5f51cbfe379177
- https://git.kernel.org/stable/c/e3ceafa6d8ee6b3a0f7fabe7a551fda909edbd46
- https://git.kernel.org/stable/c/c6cda17e98545980e42291fc4282daa8a8ebe384
- https://git.kernel.org/stable/c/151edde741f8bc7f2931c5f44ab376d32b0c8beb
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.