CVE-2026-68178: misc: nsm: pin the module while the device is open
In the Linux kernel, the following vulnerability has been resolved:
misc: nsm: pin the module while the device is open
miscopen() installs a misc driver's file operations with fopsget(), which pins fileoperations::owner before replacing the file's fop. The NSM misc device leaves nsmdevfops.owner unset, so opening /dev/nsm does not take a module reference on the nsm driver.
If the driver is built as a module, an open file descriptor can therefore survive rmmod of the module that provides its ioctl callbacks. A later ioctl through that descriptor can call into unloaded module text.
Set nsmdevfops.owner to THISMODULE so the misc core holds the module while any /dev/nsm file descriptor is open, matching the lifetime expectation for the installed file operations.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68178?
CVE-2026-68178 has a risk score of 54, indicating it is a medium-level security vulnerability.
How do I fix CVE-2026-68178?
To mitigate CVE-2026-68178, apply the latest patches and updates provided by your Linux distribution.
What systems are affected by CVE-2026-68178?
CVE-2026-68178 affects versions of the Linux kernel that implement the misc: nsm driver.
Is CVE-2026-68178 a remote vulnerability?
CVE-2026-68178 is not classified as a remote vulnerability, as it requires local access to exploit.
What are the potential impacts of CVE-2026-68178?
CVE-2026-68178 can cause denial of service or corruption of kernel memory data in affected systems.