Answer in brief
CVE-2026-68181 records a Unknown severity vulnerability in mei: bus: access mei_device under device_lock on cleanup. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=24f4ceeaeee7983c07590149556a0e33efe2ec90 <441559d4c595f839b39f0ab6a4ae628427c2fd9e || >=612c8d21ce6e37b73f3106aec7ffa35959d40261 <c88c030a324c9018b77894a19b2564eb66862020 || >=35e8a426b16adbecae7a4e0e3c00fc8d0273db53 <59dd34854202d9a3faaa87a85205e553fe7150e1 || >=35e8a426b16adbecae7a4e0e3c00fc8d0273db53 <7cf79e8d682fe93777268f029668ce5e214237fd || >=35e8a426b16adbecae7a4e0e3c00fc8d0273db53 <f112ea910e554d58b4b39a4492b7d302f0f4204f || 6f2a6ef86b23a30b92ad57981de537bce67bfa45 || 2f29dce5a5ae06a7db32e4491d72269329a86eeb || 28de6ca5276a94b0589ae1bf026b89fa0eaf14c0 || >=6.6.103 <6.6.148 || >=6.12.43 <6.12.101 || >=6.1.149 <6.2 || >=6.15.11 <6.16 || >=6.16.2 <6.17 | 441559d4c595f839b39f0ab6a4ae628427c2fd9e, c88c030a324c9018b77894a19b2564eb66862020, 59dd34854202d9a3faaa87a85205e553fe7150e1, 7cf79e8d682fe93777268f029668ce5e214237fd, f112ea910e554d58b4b39a4492b7d302f0f4204f, 6.6.148, 6.12.101, 6.2, 6.16, 6.17 |
| Linux/Linuxgeneric | 6.17 | Not reported |
Published upstream
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 10, 2026
In the Linux kernel, the following vulnerability has been resolved: mei: bus: access mei_device under device_lock on cleanup Fix couple of problems in mei_cl_bus_dev_release(): mei_cl_flush_queues() is running without lock. bus->file_list access after mei_dev_bus_put(bus) can become a use-after-free if this was the last reference to bus. Protect queues cleanup and WARN traversal by device lock there to avoid the concurrent access problems. Move WARN traversal before mei_dev_bus_put(bus). This file uses bus variable name for mei_device, adjust code of mei_cl_bus_dev_release() to use bus variable too.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-68181 records a Unknown severity vulnerability in mei: bus: access mei_device under device_lock on cleanup. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=24f4ceeaeee7983c07590149556a0e33efe2ec90 <441559d4c595f839b39f0ab6a4ae628427c2fd9e || >=612c8d21ce6e37b73f3106aec7ffa35959d40261 <c88c030a324c9018b77894a19b2564eb66862020 || >=35e8a426b16adbecae7a4e0e3c00fc8d0273db53 <59dd34854202d9a3faaa87a85205e553fe7150e1 || >=35e8a426b16adbecae7a4e0e3c00fc8d0273db53 <7cf79e8d682fe93777268f029668ce5e214237fd || >=35e8a426b16adbecae7a4e0e3c00fc8d0273db53 <f112ea910e554d58b4b39a4492b7d302f0f4204f || 6f2a6ef86b23a30b92ad57981de537bce67bfa45 || 2f29dce5a5ae06a7db32e4491d72269329a86eeb || 28de6ca5276a94b0589ae1bf026b89fa0eaf14c0 || >=6.6.103 <6.6.148 || >=6.12.43 <6.12.101 || >=6.1.149 <6.2 || >=6.15.11 <6.16 || >=6.16.2 <6.17 | 441559d4c595f839b39f0ab6a4ae628427c2fd9e, c88c030a324c9018b77894a19b2564eb66862020, 59dd34854202d9a3faaa87a85205e553fe7150e1, 7cf79e8d682fe93777268f029668ce5e214237fd, f112ea910e554d58b4b39a4492b7d302f0f4204f, 6.6.148, 6.12.101, 6.2, 6.16, 6.17 |
| Linux/Linuxgeneric | 6.17 | Not reported |
Published upstream
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 10, 2026
In the Linux kernel, the following vulnerability has been resolved: mei: bus: access mei_device under device_lock on cleanup Fix couple of problems in mei_cl_bus_dev_release(): mei_cl_flush_queues() is running without lock. bus->file_list access after mei_dev_bus_put(bus) can become a use-after-free if this was the last reference to bus. Protect queues cleanup and WARN traversal by device lock there to avoid the concurrent access problems. Move WARN traversal before mei_dev_bus_put(bus). This file uses bus variable name for mei_device, adjust code of mei_cl_bus_dev_release() to use bus variable too.
Quoted source text, attributed separately from HOL analysis.