CVE-2026-68181: mei: bus: access mei_device under device_lock on cleanup
In the Linux kernel, the following vulnerability has been resolved:
mei: bus: access meidevice under devicelock on cleanup
Fix couple of problems in meiclbusdevrelease():
meiclflushqueues() is running without lock. bus->filelist access after meidevbusput(bus) can become a use-after-free if this was the last reference to bus.
Protect queues cleanup and WARN traversal by device lock there to avoid the concurrent access problems. Move WARN traversal before meidevbusput(bus).
This file uses bus variable name for meidevice, adjust code of meiclbusdevrelease() to use bus variable too.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68181?
The severity of CVE-2026-68181 is rated as risk level 34.
What type of vulnerability is CVE-2026-68181?
CVE-2026-68181 is classified as a Use After Free vulnerability.
How does CVE-2026-68181 affect the Linux kernel?
CVE-2026-68181 allows access to mei_device under device_lock during cleanup, which can lead to a use-after-free condition.
What is the recommended solution for CVE-2026-68181?
To mitigate CVE-2026-68181, ensure that all related cleanup operations are performed with proper locking mechanisms.
When was CVE-2026-68181 published?
CVE-2026-68181 was published on August 10, 2026.