vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-68227

media: cx231xx: fix devres lifetime

N/A
Published: August 10, 2026 at 12:00 PM UTC
Updated: August 19, 2026 at 05:20 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: fix devres lifetime USB drivers bind to USB interfaces and any device managed resources should have their lifetime tied to the interface rather than parent USB device. This avoids issues like memory leaks when drivers are unbound without their devices being physically disconnected (e.g. on probe deferral or configuration changes). Fix the driver state lifetime so that it is released on driver unbind.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
3.17 ≤ v < 5.10.2653.17 ≤ v < 5.15.2163.17 ≤ v < 6.1.1833.17 ≤ v < 6.12.1013.17 ≤ v < 6.18.423.17 ≤ v < 6.6.1483.17 ≤ v < 7.1.63.17 ≤ v < 7.2184a82784d50ad82aadc3917a3bdd8314a0e9b9b3.17
Vendor states this is fixed in 0ea4b6fd49f7bed3a7e2b8734c15d9699dabe26f (fixed)
Vendor states this is fixed in 1770fc4e2b47b1185e6f688d4012bc91f7543854 (fixed)
Vendor states this is fixed in 7d6358ab02866e5b7ed8d3a00805297617bbb0ec (fixed)
Vendor states this is fixed in a373f1a5137e96549a795e7fb9efb5de0ae1d065 (fixed)
Vendor states this is fixed in c07f535bcdd3f956d4c32085535368f46ba99ba0 (fixed)
Vendor states this is fixed in c5ccb01eb1107acb6aab8ce8fe5a523f215c837e (fixed)
Vendor states this is fixed in e797e252bfb3d0d4b3d38e4faef817e05869c240 (fixed)
Vendor states this is fixed in f468b7ee5d6332b01e6c538179a4c720e6dae93b (fixed)
Vendor states this is fixed in 3.17 (unaffected)
Vendor states this is fixed in 5.10.265 (unaffected)
Vendor states this is fixed in 5.15.216 (unaffected)
Vendor states this is fixed in 6.1.183 (unaffected)
Vendor states this is fixed in 6.12.101 (unaffected)
Vendor states this is fixed in 6.18.42 (unaffected)
Vendor states this is fixed in 6.6.148 (unaffected)
Vendor states this is fixed in 7.1.6 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/a373f1a5137e96549a795e7fb9efb5de0ae1d065
Source: cverecord
https://git.kernel.org/stable/c/c5ccb01eb1107acb6aab8ce8fe5a523f215c837e
Source: cverecord
https://git.kernel.org/stable/c/f468b7ee5d6332b01e6c538179a4c720e6dae93b
Source: cverecord
https://git.kernel.org/stable/c/e797e252bfb3d0d4b3d38e4faef817e05869c240
Source: cverecord
https://git.kernel.org/stable/c/7d6358ab02866e5b7ed8d3a00805297617bbb0ec
Source: cverecord
https://git.kernel.org/stable/c/1770fc4e2b47b1185e6f688d4012bc91f7543854
Source: cverecord
https://git.kernel.org/stable/c/c07f535bcdd3f956d4c32085535368f46ba99ba0
Source: cverecord
https://git.kernel.org/stable/c/0ea4b6fd49f7bed3a7e2b8734c15d9699dabe26f

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card