CVE-2026-68084: staging: vme_user: fix location monitor leak in tsi148 bridge
In the Linux kernel, the following vulnerability has been resolved:
staging: vmeuser: fix location monitor leak in tsi148 bridge
tsi148probe() allocates a location monitor resource and links it into tsi148bridge->lmresources. The probe error path frees this list, but tsi148remove() only frees the dma, slave and master resource lists, so the location monitor resource is leaked on device unbind or module unload.
Free the lmresources list in tsi148remove() as well, before tsi148bridge is freed.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel (staging: vme_user)to a version that resolves this vulnerability.Fixed in staging: vme_user: fix location monitor leak in tsi148 bridge
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68084?
CVE-2026-68084 has a severity rating of 10, indicating critical risk.
How do I fix CVE-2026-68084?
To fix CVE-2026-68084, update to the latest version of the Linux Kernel that includes the patch for this vulnerability.
What systems are affected by CVE-2026-68084?
CVE-2026-68084 affects systems running the specific versions of the Linux Kernel that contain the vme_user component.
What are the potential impacts of CVE-2026-68084?
The potential impacts of CVE-2026-68084 include resource leaks that could lead to system instability or crashes.
Who is responsible for the CVE-2026-68084 vulnerability?
The CVE-2026-68084 vulnerability was identified in the staging area of the Linux kernel, specifically related to the tsi148 bridge.