CVE-2026-68181mei: bus: access mei_device under device_lock on cleanup
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: mei: bus: access mei_device under device_lock on cleanup Fix couple of problems in mei_cl_bus_dev_release(): mei_cl_flush_queues() is running without lock. bus->file_list access after mei_dev_bus_put(bus) can become a use-after-free if this was the last reference to bus. Protect queues cleanup and WARN traversal by device lock there to avoid the concurrent access problems. Move WARN traversal before mei_dev_bus_put(bus). This file uses bus variable name for mei_device, adjust code of mei_cl_bus_dev_release() to use bus variable too.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 23, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 6f2a6ef86b23a30b92ad57981de537bce67bfa45 builds before 02e3a755086db847d795f2593ebc45e8ee4f1755; from 24f4ceeaeee7983c07590149556a0e33efe2ec90 before 441559d4c595f839b39f0ab6a4ae628427c2fd9e; from 612c8d21ce6e37b73f3106aec7ffa35959d40261 before c88c030a324c9018b77894a19b2564eb66862020; from 35e8a426b16adbecae7a4e0e3c00fc8d0273db53 before 59dd34854202d9a3faaa87a85205e553fe7150e1; 35e8a426b16adbecae7a4e0e3c00fc8d0273db53 builds before 7cf79e8d682fe93777268f029668ce5e214237fd; from 35e8a426b16adbecae7a4e0e3c00fc8d0273db53 before f112ea910e554d58b4b39a4492b7d302f0f4204f; 2f29dce5a5ae06a7db32e4491d72269329a86eeb; 28de6ca5276a94b0589ae1bf026b89fa0eaf14c0; and 5 more ranges | CNA record |
References
- https://git.kernel.org/stable/c/02e3a755086db847d795f2593ebc45e8ee4f1755
- https://git.kernel.org/stable/c/441559d4c595f839b39f0ab6a4ae628427c2fd9e
- https://git.kernel.org/stable/c/c88c030a324c9018b77894a19b2564eb66862020
- https://git.kernel.org/stable/c/59dd34854202d9a3faaa87a85205e553fe7150e1
- https://git.kernel.org/stable/c/7cf79e8d682fe93777268f029668ce5e214237fd
- https://git.kernel.org/stable/c/f112ea910e554d58b4b39a4492b7d302f0f4204f
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.