CVE-2026-68084

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-68084", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-30T09:28:09.367Z", "datePublished": "2026-08-10T11:51:37.255Z", "dateUpdated": "2026-08-17T04:58:31.918Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-17T04:58:31.918Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: vme_user: fix location monitor leak in tsi148 bridge\n\ntsi148_probe() allocates a location monitor resource and links it into\ntsi148_bridge->lm_resources. The probe error path frees this list, but\ntsi148_remove() only frees the dma, slave and master resource lists, so\nthe location monitor resource is leaked on device unbind or module\nunload.\n\nFree the lm_resources list in tsi148_remove() as well, before\ntsi148_bridge is freed."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/staging/vme_user/vme_tsi148.c"], "versions": [{"version": "d22b8ed9a3b0a157b732580258ec16b729265953", "lessThan": "18be0ad31b161a8b6fbc90d14355ad40c061b6b0", "status": "affected", "versionType": "git"}, {"version": "d22b8ed9a3b0a157b732580258ec16b729265953", "lessThan": "eef048dd77ebfbf99d7c28f9e9dd331d2af7b6f6", "status": "affected", "versionType": "git"}, {"version": "d22b8ed9a3b0a157b732580258ec16b729265953", "lessThan": "36902ab588ccc2fa07994adf6c5f51cbfe379177", "status": "affected", "versionType": "git"}, {"version": "d22b8ed9a3b0a157b732580258ec16b729265953", "lessThan": "e3ceafa6d8ee6b3a0f7fabe7a551fda909edbd46", "status": "affected", "versionType": "git"}, {"version": "d22b8ed9a3b0a157b732580258ec16b729265953", "lessThan": "c6cda17e98545980e42291fc4282daa8a8ebe384", "status": "affected", "versionType": "git"}, {"version": "d22b8ed9a3b0a157b732580258ec16b729265953", "lessThan": "151edde741f8bc7f2931c5f44ab376d32b0c8beb", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/staging/vme_user/vme_tsi148.c"], "versions": [{"version": "2.6.32", "status": "affected"}, {"version": "0", "lessThan": "2.6.32", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.178", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.145", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.96", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.39", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.4", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.32", "versionEndExcluding": "6.1.178"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.32", "versionEndExcluding": "6.6.145"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.32", "versionEndExcluding": "6.12.96"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.32", "versionEndExcluding": "6.18.39"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.32", "versionEndExcluding": "7.1.4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.32", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/18be0ad31b161a8b6fbc90d14355ad40c061b6b0"}, {"url": "https://git.kernel.org/stable/c/eef048dd77ebfbf99d7c28f9e9dd331d2af7b6f6"}, {"url": "https://git.kernel.org/stable/c/36902ab588ccc2fa07994adf6c5f51cbfe379177"}, {"url": "https://git.kernel.org/stable/c/e3ceafa6d8ee6b3a0f7fabe7a551fda909edbd46"}, {"url": "https://git.kernel.org/stable/c/c6cda17e98545980e42291fc4282daa8a8ebe384"}, {"url": "https://git.kernel.org/stable/c/151edde741f8bc7f2931c5f44ab376d32b0c8beb"}], "title": "staging: vme_user: fix location monitor leak in tsi148 bridge", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/staging/vme_user/vme_tsi148.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "18be0ad31b161a8b6fbc90d14355ad40c061b6b0", "status": "affected", "version": "d22b8ed9a3b0a157b732580258ec16b729265953", "versionType": "git"}, {"lessThan": "eef048dd77ebfbf99d7c28f9e9dd331d2af7b6f6", "status": "affected", "version": "d22b8ed9a3b0a157b732580258ec16b729265953", "versionType": "git"}, {"lessThan": "36902ab588ccc2fa07994adf6c5f51cbfe379177", "status": "affected", "version": "d22b8ed9a3b0a157b732580258ec16b729265953", "versionType": "git"}, {"lessThan": "e3ceafa6d8ee6b3a0f7fabe7a551fda909edbd46", "status": "affected", "version": "d22b8ed9a3b0a157b732580258ec16b729265953", "versionType": "git"}, {"lessThan": "c6cda17e98545980e42291fc4282daa8a8ebe384", "status": "affected", "version": "d22b8ed9a3b0a157b732580258ec16b729265953", "versionType": "git"}, {"lessThan": "151edde741f8bc7f2931c5f44ab376d32b0c8beb", "status": "affected", "version": "d22b8ed9a3b0a157b732580258ec16b729265953", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/staging/vme_user/vme_tsi148.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "2.6.32"}, {"lessThan": "2.6.32", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.178", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.145", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.96", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.39", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.4", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: vme_user: fix location monitor leak in tsi148 bridge\n\ntsi148_probe() allocates a location monitor resource and links it into\ntsi148_bridge->lm_resources. The probe error path frees this list, but\ntsi148_remove() only frees the dma, slave and master resource lists, so\nthe location monitor resource is leaked on device unbind or module\nunload.\n\nFree the lm_resources list in tsi148_remove() as well, before\ntsi148_bridge is freed."}], "id": "CVE-2026-68084", "lastModified": "2026-08-17T05:18:07.633", "metrics": {}, "published": "2026-08-10T12:17:20.933", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/151edde741f8bc7f2931c5f44ab376d32b0c8beb"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/18be0ad31b161a8b6fbc90d14355ad40c061b6b0"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/36902ab588ccc2fa07994adf6c5f51cbfe379177"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/c6cda17e98545980e42291fc4282daa8a8ebe384"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/e3ceafa6d8ee6b3a0f7fabe7a551fda909edbd46"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/eef048dd77ebfbf99d7c28f9e9dd331d2af7b6f6"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: staging: vme_user: fix location monitor leak in tsi148 bridge", "id": "2513135", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2513135"}, "csaw": false, "cwe": "CWE-772", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nstaging: vme_user: fix location monitor leak in tsi148 bridge\ntsi148_probe() allocates a location monitor resource and links it into\ntsi148_bridge->lm_resources. The probe error path frees this list, but\ntsi148_remove() only frees the dma, slave and master resource lists, so\nthe location monitor resource is leaked on device unbind or module\nunload.\nFree the lm_resources list in tsi148_remove() as well, before\ntsi148_bridge is freed.", "A flaw was found in the Linux kernel's `tsi148 bridge` component. This vulnerability occurs due to a resource leak where the location monitor resources are not properly freed during device unbind or module unload operations. An attacker could potentially exploit this flaw to exhaust system resources, leading to a Denial of Service (DoS)."], "name": "CVE-2026-68084", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-08-10T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-68084\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-68084\nhttps://lore.kernel.org/linux-cve-announce/2026081056-CVE-2026-68084-ae3b@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d22b8ed9a3b0a157b732580258ec16b729265953,18be0ad31b161a8b6fbc90d14355ad40c061b6b0)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d22b8ed9a3b0a157b732580258ec16b729265953,eef048dd77ebfbf99d7c28f9e9dd331d2af7b6f6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d22b8ed9a3b0a157b732580258ec16b729265953,36902ab588ccc2fa07994adf6c5f51cbfe379177)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d22b8ed9a3b0a157b732580258ec16b729265953,e3ceafa6d8ee6b3a0f7fabe7a551fda909edbd46)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d22b8ed9a3b0a157b732580258ec16b729265953,c6cda17e98545980e42291fc4282daa8a8ebe384)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[d22b8ed9a3b0a157b732580258ec16b729265953,151edde741f8bc7f2931c5f44ab376d32b0c8beb)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.6.32"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,2.6.32)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.178,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.145,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.96,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.39,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.4,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-10T20:30:05.425845+00:00", "updated": "2026-08-13T10:45:04.010195+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}