CVE-2026-68227: media: cx231xx: fix devres lifetime
In the Linux kernel, the following vulnerability has been resolved:
media: cx231xx: fix devres lifetime
USB drivers bind to USB interfaces and any device managed resources should have their lifetime tied to the interface rather than parent USB device. This avoids issues like memory leaks when drivers are unbound without their devices being physically disconnected (e.g. on probe deferral or configuration changes).
Fix the driver state lifetime so that it is released on driver unbind.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68227?
CVE-2026-68227 has a risk rating of 12.
What kind of vulnerability is CVE-2026-68227?
CVE-2026-68227 is a vulnerability regarding the lifetime management of devres in the cx231xx media driver within the Linux kernel.
How do I fix CVE-2026-68227?
To resolve CVE-2026-68227, ensure that USB drivers manage device lifetimes properly by tying them to the USB interface.
What are the potential impacts of CVE-2026-68227?
CVE-2026-68227 can lead to memory leaks when USB drivers do not properly manage resources tied to their respective device interfaces.
When was CVE-2026-68227 published?
CVE-2026-68227 was published on August 10, 2026.