https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 04:43:09 +0000 https://vulnerability.circl.lu/vuln/cve-2026-68181 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>mei: bus: access mei_device under device_lock on cleanup</p> <p>Fix couple of problems in mei_cl_bus_dev_release():</p> <p>mei_cl_flush_queues() is running without lock. bus-&gt;file_list access after mei_dev_bus_put(bus) can become a use-after-free if this was the last reference to bus.</p> <p>Protect queues cleanup and WARN traversal by device lock there to avoid the concurrent access problems. Move WARN traversal before mei_dev_bus_put(bus).</p> <p>This file uses bus variable name for mei_device, adjust code of mei_cl_bus_dev_release() to use bus variable too.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>mei: bus: access mei_device under device_lock on cleanup</p> <p>Fix couple of problems in mei_cl_bus_dev_release():</p> <p>mei_cl_flush_queues() is running without lock. bus-&gt;file_list access after mei_dev_bus_put(bus) can become a use-after-free if this was the last reference to bus.</p> <p>Protect queues cleanup and WARN traversal by device lock there to avoid the concurrent access problems. Move WARN traversal before mei_dev_bus_put(bus).</p> <p>This file uses bus variable name for mei_device, adjust code of mei_cl_bus_dev_release() to use bus variable too.</p> https://vulnerability.circl.lu/vuln/cve-2026-68181