In the Linux kernel, the following vulnerability has been resolved:

media: cx231xx: fix devres lifetime

USB drivers bind to USB interfaces and any device managed resources
should have their lifetime tied to the interface rather than parent USB
device. This avoids issues like memory leaks when drivers are unbound
without their devices being physically disconnected (e.g. on probe
deferral or configuration changes).

Fix the driver state lifetime so that it is released on driver unbind.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
184a82784d50ad82aadc3917a3bdd8314a0e9b9b affected < a373f1a5137e96549a795e7fb9efb5de0ae1d065
184a82784d50ad82aadc3917a3bdd8314a0e9b9b affected < c5ccb01eb1107acb6aab8ce8fe5a523f215c837e
184a82784d50ad82aadc3917a3bdd8314a0e9b9b affected < f468b7ee5d6332b01e6c538179a4c720e6dae93b
184a82784d50ad82aadc3917a3bdd8314a0e9b9b affected < e797e252bfb3d0d4b3d38e4faef817e05869c240
184a82784d50ad82aadc3917a3bdd8314a0e9b9b affected < 7d6358ab02866e5b7ed8d3a00805297617bbb0ec
Linux Linux affected
Version Status Constraints
3.17 affected —
0 unaffected < 3.17
6.6.148 unaffected ≤ 6.6.*
6.12.101 unaffected ≤ 6.12.*
6.18.42 unaffected ≤ 6.18.*
7.1.6 unaffected ≤ 7.1.*
7.2-rc1 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/7d6358ab02866e5b7ed8d3a00805297617bbb0ec cve-icon
https://git.kernel.org/stable/c/a373f1a5137e96549a795e7fb9efb5de0ae1d065 cve-icon
https://git.kernel.org/stable/c/c5ccb01eb1107acb6aab8ce8fe5a523f215c837e cve-icon
https://git.kernel.org/stable/c/e797e252bfb3d0d4b3d38e4faef817e05869c240 cve-icon
https://git.kernel.org/stable/c/f468b7ee5d6332b01e6c538179a4c720e6dae93b cve-icon
History

Mon, 10 Aug 2026 20:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-400
CWE-789

Mon, 10 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: fix devres lifetime USB drivers bind to USB interfaces and any device managed resources should have their lifetime tied to the interface rather than parent USB device. This avoids issues like memory leaks when drivers are unbound without their devices being physically disconnected (e.g. on probe deferral or configuration changes). Fix the driver state lifetime so that it is released on driver unbind.
Title media: cx231xx: fix devres lifetime
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-10T12:00:49.821Z

Reserved: 2026-07-30T09:28:09.376Z

Link: CVE-2026-68227

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-10T19:45:04Z

Weaknesses