In the Linux kernel, the following vulnerability has been resolved:

mei: bus: access mei_device under device_lock on cleanup

Fix couple of problems in mei_cl_bus_dev_release():

mei_cl_flush_queues() is running without lock.
bus->file_list access after mei_dev_bus_put(bus) can become a
use-after-free if this was the last reference to bus.

Protect queues cleanup and WARN traversal by device lock there
to avoid the concurrent access problems.
Move WARN traversal before mei_dev_bus_put(bus).

This file uses bus variable name for mei_device, adjust
code of mei_cl_bus_dev_release() to use bus variable too.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
24f4ceeaeee7983c07590149556a0e33efe2ec90 affected < 441559d4c595f839b39f0ab6a4ae628427c2fd9e
612c8d21ce6e37b73f3106aec7ffa35959d40261 affected < c88c030a324c9018b77894a19b2564eb66862020
35e8a426b16adbecae7a4e0e3c00fc8d0273db53 affected < 59dd34854202d9a3faaa87a85205e553fe7150e1
35e8a426b16adbecae7a4e0e3c00fc8d0273db53 affected < 7cf79e8d682fe93777268f029668ce5e214237fd
35e8a426b16adbecae7a4e0e3c00fc8d0273db53 affected < f112ea910e554d58b4b39a4492b7d302f0f4204f
6f2a6ef86b23a30b92ad57981de537bce67bfa45 affected —
2f29dce5a5ae06a7db32e4491d72269329a86eeb affected —
28de6ca5276a94b0589ae1bf026b89fa0eaf14c0 affected —
6.6.103 affected < 6.6.148
6.12.43 affected < 6.12.101
6.1.149 affected < 6.2
6.15.11 affected < 6.16
6.16.2 affected < 6.17
Linux Linux affected
Version Status Constraints
6.17 affected —
0 unaffected < 6.17
6.6.148 unaffected ≤ 6.6.*
6.12.101 unaffected ≤ 6.12.*
6.18.42 unaffected ≤ 6.18.*
7.1.6 unaffected ≤ 7.1.*
7.2-rc5 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/441559d4c595f839b39f0ab6a4ae628427c2fd9e cve-icon
https://git.kernel.org/stable/c/59dd34854202d9a3faaa87a85205e553fe7150e1 cve-icon
https://git.kernel.org/stable/c/7cf79e8d682fe93777268f029668ce5e214237fd cve-icon
https://git.kernel.org/stable/c/c88c030a324c9018b77894a19b2564eb66862020 cve-icon
https://git.kernel.org/stable/c/f112ea910e554d58b4b39a4492b7d302f0f4204f cve-icon
History

Mon, 10 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: mei: bus: access mei_device under device_lock on cleanup Fix couple of problems in mei_cl_bus_dev_release(): mei_cl_flush_queues() is running without lock. bus->file_list access after mei_dev_bus_put(bus) can become a use-after-free if this was the last reference to bus. Protect queues cleanup and WARN traversal by device lock there to avoid the concurrent access problems. Move WARN traversal before mei_dev_bus_put(bus). This file uses bus variable name for mei_device, adjust code of mei_cl_bus_dev_release() to use bus variable too.
Title mei: bus: access mei_device under device_lock on cleanup
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-10T11:59:52.724Z

Reserved: 2026-07-30T09:28:09.373Z

Link: CVE-2026-68181

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-10T16:45:03Z

Weaknesses

No weakness.