Answer in brief
CVE-2026-68371 records a Unknown severity vulnerability in usb: musb: omap2430: Do not put borrowed of_node in probe. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=ffbe2feac59b37c8dc536727552b4f375e1b9aec <eed56f105a7f70cbcfceb4df6deb6870fc58214d || >=ffbe2feac59b37c8dc536727552b4f375e1b9aec <58d1c81c0b54a0b9aa6d6af077b09aa2f1bd2193 || >=ffbe2feac59b37c8dc536727552b4f375e1b9aec <0950ac52426b0ab32d3b8cf4afe1711668b19cb8 || >=ffbe2feac59b37c8dc536727552b4f375e1b9aec <6c525c851e5912b9753622d796f2bc55c4913b04 || >=ffbe2feac59b37c8dc536727552b4f375e1b9aec <c947360ae63eee1c9eacc030dd6f5a53f717addf || fed43efc00ba6ac8c6b95828cd5acfa3d45eca4d || 22b60658a90260e3fbd57824e3afe5682c6afcf5 || >=6.0.16 <6.1 || >=6.1.2 <6.2 | eed56f105a7f70cbcfceb4df6deb6870fc58214d, 58d1c81c0b54a0b9aa6d6af077b09aa2f1bd2193, 0950ac52426b0ab32d3b8cf4afe1711668b19cb8, 6c525c851e5912b9753622d796f2bc55c4913b04, c947360ae63eee1c9eacc030dd6f5a53f717addf, 6.1, 6.2 |
| Linux/Linuxgeneric | 6.2 | Not reported |
Published upstream
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 10, 2026
In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Do not put borrowed of_node in probe omap2430_probe() stores pdev->dev.of_node in a local np variable. This is a borrowed pointer and the probe function does not take a reference to it. The success and error paths nevertheless call of_node_put(np). This drops a reference that is owned by the platform device, and can leave pdev->dev.of_node with an unbalanced reference count. Do not put the borrowed platform device node from omap2430_probe(). References taken for the child MUSB device are handled by the device core, and the ctrl-module phandle reference is still released separately.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-68371 records a Unknown severity vulnerability in usb: musb: omap2430: Do not put borrowed of_node in probe. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=ffbe2feac59b37c8dc536727552b4f375e1b9aec <eed56f105a7f70cbcfceb4df6deb6870fc58214d || >=ffbe2feac59b37c8dc536727552b4f375e1b9aec <58d1c81c0b54a0b9aa6d6af077b09aa2f1bd2193 || >=ffbe2feac59b37c8dc536727552b4f375e1b9aec <0950ac52426b0ab32d3b8cf4afe1711668b19cb8 || >=ffbe2feac59b37c8dc536727552b4f375e1b9aec <6c525c851e5912b9753622d796f2bc55c4913b04 || >=ffbe2feac59b37c8dc536727552b4f375e1b9aec <c947360ae63eee1c9eacc030dd6f5a53f717addf || fed43efc00ba6ac8c6b95828cd5acfa3d45eca4d || 22b60658a90260e3fbd57824e3afe5682c6afcf5 || >=6.0.16 <6.1 || >=6.1.2 <6.2 | eed56f105a7f70cbcfceb4df6deb6870fc58214d, 58d1c81c0b54a0b9aa6d6af077b09aa2f1bd2193, 0950ac52426b0ab32d3b8cf4afe1711668b19cb8, 6c525c851e5912b9753622d796f2bc55c4913b04, c947360ae63eee1c9eacc030dd6f5a53f717addf, 6.1, 6.2 |
| Linux/Linuxgeneric | 6.2 | Not reported |
Published upstream
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 10, 2026
In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Do not put borrowed of_node in probe omap2430_probe() stores pdev->dev.of_node in a local np variable. This is a borrowed pointer and the probe function does not take a reference to it. The success and error paths nevertheless call of_node_put(np). This drops a reference that is owned by the platform device, and can leave pdev->dev.of_node with an unbalanced reference count. Do not put the borrowed platform device node from omap2430_probe(). References taken for the child MUSB device are handled by the device core, and the ctrl-module phandle reference is still released separately.
Quoted source text, attributed separately from HOL analysis.