Answer in brief
CVE-2026-68180 records a Unknown severity vulnerability in intel_th: fix MSC output device reference leak. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=bf7785434b5d05d940d936b78925080950bd54dd <ddcf2064d7ec5a8c9afa7cb74442320e443502bc || >=0fca16c5591534cc1fec8b6181277ee3a3d0f26c <26e27b8dcef1e4df6f30d8f25b3304a506d482b3 || >=f9b059bda4276f2bb72cb98ec7875a747f042ea2 <caba30eb8bd321c465ecfc7d850ee85f5b353496 || >=95fc36a234da24bbc5f476f8104a5a15f99ed3e3 <c3a28f9cb82425fe0835048ed3677f321e780691 || >=95fc36a234da24bbc5f476f8104a5a15f99ed3e3 <761b785a0cfbce43761227bc42a7f984f31f8921 || af4b9467296b9a16ebc008147238070236982b6d || 64015cbf06e8bb75b81ae95b997e847b55280f7f || b71e64ef7ff9443835d1333e3e80ab1e49e5209f || >=6.6.122 <6.6.148 || >=6.12.68 <6.12.101 || >=6.18.8 <6.18.42 || >=5.10.249 <5.11 || >=5.15.199 <5.16 || >=6.1.162 <6.2 | ddcf2064d7ec5a8c9afa7cb74442320e443502bc, 26e27b8dcef1e4df6f30d8f25b3304a506d482b3, caba30eb8bd321c465ecfc7d850ee85f5b353496, c3a28f9cb82425fe0835048ed3677f321e780691, 761b785a0cfbce43761227bc42a7f984f31f8921, 6.6.148, 6.12.101, 6.18.42, 5.11, 5.16, 6.2 |
| Linux/Linuxgeneric | 6.19 | Not reported |
Published upstream
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 10, 2026
In the Linux kernel, the following vulnerability has been resolved: intel_th: fix MSC output device reference leak intel_th_output_open() looks up the output device with bus_find_device_by_devt(), which returns the device with a reference that must be dropped after use. commit 95fc36a234da ("intel_th: fix device leak on output open()") attempted to drop the reference from intel_th_output_release(). However, a successful open replaces file->f_op with the output driver file operations before returning, so close runs the output driver release callback instead. For MSC outputs, close runs intel_th_msc_release(), which only removes the per-file iterator and does not drop the device reference taken by intel_th_output_open(). Consequently, every successful MSC output open leaks one device reference. Drop the device reference from intel_th_msc_release(), which is the release path actually used for MSC output files. Remove the now-unused intel_th_output_release() callback from intel_th_output_fops.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-68180 records a Unknown severity vulnerability in intel_th: fix MSC output device reference leak. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=bf7785434b5d05d940d936b78925080950bd54dd <ddcf2064d7ec5a8c9afa7cb74442320e443502bc || >=0fca16c5591534cc1fec8b6181277ee3a3d0f26c <26e27b8dcef1e4df6f30d8f25b3304a506d482b3 || >=f9b059bda4276f2bb72cb98ec7875a747f042ea2 <caba30eb8bd321c465ecfc7d850ee85f5b353496 || >=95fc36a234da24bbc5f476f8104a5a15f99ed3e3 <c3a28f9cb82425fe0835048ed3677f321e780691 || >=95fc36a234da24bbc5f476f8104a5a15f99ed3e3 <761b785a0cfbce43761227bc42a7f984f31f8921 || af4b9467296b9a16ebc008147238070236982b6d || 64015cbf06e8bb75b81ae95b997e847b55280f7f || b71e64ef7ff9443835d1333e3e80ab1e49e5209f || >=6.6.122 <6.6.148 || >=6.12.68 <6.12.101 || >=6.18.8 <6.18.42 || >=5.10.249 <5.11 || >=5.15.199 <5.16 || >=6.1.162 <6.2 | ddcf2064d7ec5a8c9afa7cb74442320e443502bc, 26e27b8dcef1e4df6f30d8f25b3304a506d482b3, caba30eb8bd321c465ecfc7d850ee85f5b353496, c3a28f9cb82425fe0835048ed3677f321e780691, 761b785a0cfbce43761227bc42a7f984f31f8921, 6.6.148, 6.12.101, 6.18.42, 5.11, 5.16, 6.2 |
| Linux/Linuxgeneric | 6.19 | Not reported |
Published upstream
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 10, 2026
In the Linux kernel, the following vulnerability has been resolved: intel_th: fix MSC output device reference leak intel_th_output_open() looks up the output device with bus_find_device_by_devt(), which returns the device with a reference that must be dropped after use. commit 95fc36a234da ("intel_th: fix device leak on output open()") attempted to drop the reference from intel_th_output_release(). However, a successful open replaces file->f_op with the output driver file operations before returning, so close runs the output driver release callback instead. For MSC outputs, close runs intel_th_msc_release(), which only removes the per-file iterator and does not drop the device reference taken by intel_th_output_open(). Consequently, every successful MSC output open leaks one device reference. Drop the device reference from intel_th_msc_release(), which is the release path actually used for MSC output files. Remove the now-unused intel_th_output_release() callback from intel_th_output_fops.
Quoted source text, attributed separately from HOL analysis.