CVE-2026-68227
Received Received - Intake

Memory Leak in Linux Kernel cx231xx USB Driver

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: fix devres lifetime USB drivers bind to USB interfaces and any device managed resources should have their lifetime tied to the interface rather than parent USB device. This avoids issues like memory leaks when drivers are unbound without their devices being physically disconnected (e.g. on probe deferral or configuration changes). Fix the driver state lifetime so that it is released on driver unbind.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68227
EUVD
EUVD-2026-55328

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux_kernel linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves the cx231xx media driver where device resources were incorrectly tied to the parent USB device instead of the USB interface. This could lead to memory leaks when drivers are unbound without physically disconnecting devices, such as during probe deferral or configuration changes.

Detection Guidance

This vulnerability is specific to the Linux kernel's cx231xx media driver and relates to improper device resource management. Detection requires checking kernel logs for driver unbind issues or memory leaks related to the cx231xx module. Use commands like 'dmesg | grep cx231xx' or 'journalctl -k | grep cx231xx' to inspect driver behavior.

Impact Analysis

The impact is primarily technical, affecting system stability by causing memory leaks when drivers are unbound improperly. This could lead to resource exhaustion or unexpected behavior in systems using the cx231xx driver.

Mitigation Strategies

Update the Linux kernel to a patched version where this issue is resolved. Monitor kernel logs for cx231xx-related errors after updates. If using affected systems, avoid unbinding the driver without proper device disconnection to prevent memory leaks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68227. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart