CVE-2026-68227
media: cx231xx: fix devres lifetime
Not available
At a glance
- Source
- NVD
- EPSS
- EPSS 0.22 % · percentile 13 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: fix devres lifetime USB drivers bind to USB interfaces and any device managed resources should have their lifetime tied to the interface rather than parent USB device. This avoids issues like memory leaks when drivers are unbound without their devices being physically disconnected (e.g. on probe deferral or configuration changes). Fix the driver state lifetime so that it is released on driver unbind.
References
- https://git.kernel.org/stable/c/1770fc4e2b47b1185e6f688d4012bc91f7543854
- https://git.kernel.org/stable/c/c07f535bcdd3f956d4c32085535368f46ba99ba0
- https://git.kernel.org/stable/c/0ea4b6fd49f7bed3a7e2b8734c15d9699dabe26f
- https://git.kernel.org/stable/c/a373f1a5137e96549a795e7fb9efb5de0ae1d065
- https://git.kernel.org/stable/c/c5ccb01eb1107acb6aab8ce8fe5a523f215c837e
- https://git.kernel.org/stable/c/f468b7ee5d6332b01e6c538179a4c720e6dae93b
- https://git.kernel.org/stable/c/e797e252bfb3d0d4b3d38e4faef817e05869c240
- https://git.kernel.org/stable/c/7d6358ab02866e5b7ed8d3a00805297617bbb0ec
European references
- ENISA EUVD · EUVD-2026-55328
- GCVE · GCVE-0-2026-68227
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1333 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1286 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1255 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1202 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1164 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1163 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1069 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 184a82784d50ad82aadc3917a3bdd8314a0e9b9b < 1770fc4e2b47b1185e6f688d4012bc91f7543854 ; affected 184a82784d50ad82aadc3917a3bdd8314a0e9b9b < c07f535bcdd3f956d4c32085535368f46ba99ba0 ; affected 184a82784d50ad82aadc3917a3bdd8314a0e9b9b < 0ea4b6fd49f7bed3a7e2b8734c15d9699dabe26f ; affected 184a82784d50ad82aadc3917a3bdd8314a0e9b9b < a373f1a5137e96549a795e7fb9efb5de0ae1d065 ; affected 184a82784d50ad82aadc3917a3bdd8314a0e9b9b < c5ccb01eb1107acb6aab8ce8fe5a523f215c837e ; affected 184a82784d50ad82aadc3917a3bdd8314a0e9b9b < f468b7ee5d6332b01e6c538179a4c720e6dae93b |
| Linux · Linux | affected 3.17 ; unaffected 0 < 3.17 ; unaffected 5.10.265 ≤ 5.10.* ; unaffected 5.15.216 ≤ 5.15.* ; unaffected 6.1.183 ≤ 6.1.* ; unaffected 6.6.148 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |