Към съдържанието
Търсене

CVE-2026-68180: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: intel_th: fix MSC output device reference leak intel_th_output_open() looks up the output device with bus_find_device_by_devt(), which returns the device with a reference that must be dropped after use. commit 95fc36a234da ("intel_th: fix device leak on output open()") attempted to drop the reference from intel_th_output_release(). However, a successful open replaces file->f_op with the output driver file operations before returning, so close runs the output driver release callback instead. For MSC outputs, close runs intel_th_msc_release(), which only removes the per-file iterator and does not drop the device reference taken by intel_th_output_open(). Consequently, every successful MSC output open leaks one device reference. Drop the device reference from intel_th_msc_release(), which is the release path actually used for MSC output files. Remove the now-unused intel_th_output_release() callback from intel_th_output_fops.

    Засегнати продукти

    • Linux Linux: af4b9467296b9a16ebc008147238070236982b6d преди 12ad4fad748e6e563ff4480f03b89134a41b5c37; 64015cbf06e8bb75b81ae95b997e847b55280f7f преди df55842fddbcdb80e6dd16680439c0f780ed592e; b71e64ef7ff9443835d1333e3e80ab1e49e5209f преди 141641a70ed337e54487f766ede745fc2ce44c42; bf7785434b5d05d940d936b78925080950bd54dd преди ddcf2064d7ec5a8c9afa7cb74442320e443502bc; 0fca16c5591534cc1fec8b6181277ee3a3d0f26c преди 26e27b8dcef1e4df6f30d8f25b3304a506d482b3; f9b059bda4276f2bb72cb98ec7875a747f042ea2 преди caba30eb8bd321c465ecfc7d850ee85f5b353496; 95fc36a234da24bbc5f476f8104a5a15f99ed3e3 преди c3a28f9cb82425fe0835048ed3677f321e780691; 95fc36a234da24bbc5f476f8104a5a15f99ed3e3 преди 761b785a0cfbce43761227bc42a7f984f31f8921; 5.10.249 преди 5.10.265; 5.15.199 преди 5.15.216; 6.1.162 преди 6.1.183; 6.6.122 преди 6.6.148; 6.12.68 преди 6.12.101; 6.18.8 преди 6.18.42
    • Linux Linux: 6.19; преди 6.19; 5.10.265 до 5.10.*; 5.15.216 до 5.15.*; 6.1.183 до 6.1.*; 6.6.148 до 6.6.*; 6.12.101 до 6.12.*; 6.18.42 до 6.18.*; 7.1.6 до 7.1.*; от 7.2 нататък

    История

    • 10 август 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-68180: Linux | freedomonline.bg