{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-68227", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-30T09:28:09.376Z", "datePublished": "2026-08-10T12:00:49.821Z", "dateUpdated": "2026-08-10T12:00:49.821Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-10T12:00:49.821Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: cx231xx: fix devres lifetime\n\nUSB drivers bind to USB interfaces and any device managed resources\nshould have their lifetime tied to the interface rather than parent USB\ndevice. This avoids issues like memory leaks when drivers are unbound\nwithout their devices being physically disconnected (e.g. on probe\ndeferral or configuration changes).\n\nFix the driver state lifetime so that it is released on driver unbind."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/media/usb/cx231xx/cx231xx-cards.c"], "versions": [{"version": "184a82784d50ad82aadc3917a3bdd8314a0e9b9b", "lessThan": "a373f1a5137e96549a795e7fb9efb5de0ae1d065", "status": "affected", "versionType": "git"}, {"version": "184a82784d50ad82aadc3917a3bdd8314a0e9b9b", "lessThan": "c5ccb01eb1107acb6aab8ce8fe5a523f215c837e", "status": "affected", "versionType": "git"}, {"version": "184a82784d50ad82aadc3917a3bdd8314a0e9b9b", "lessThan": "f468b7ee5d6332b01e6c538179a4c720e6dae93b", "status": "affected", "versionType": "git"}, {"version": "184a82784d50ad82aadc3917a3bdd8314a0e9b9b", "lessThan": "e797e252bfb3d0d4b3d38e4faef817e05869c240", "status": "affected", "versionType": "git"}, {"version": "184a82784d50ad82aadc3917a3bdd8314a0e9b9b", "lessThan": "7d6358ab02866e5b7ed8d3a00805297617bbb0ec", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/media/usb/cx231xx/cx231xx-cards.c"], "versions": [{"version": "3.17", "status": "affected"}, {"version": "0", "lessThan": "3.17", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.148", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.101", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.42", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.6", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2-rc1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.17", "versionEndExcluding": "6.6.148"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.17", "versionEndExcluding": "6.12.101"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.17", "versionEndExcluding": "6.18.42"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.17", "versionEndExcluding": "7.1.6"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.17", "versionEndExcluding": "7.2-rc1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/a373f1a5137e96549a795e7fb9efb5de0ae1d065"}, {"url": "https://git.kernel.org/stable/c/c5ccb01eb1107acb6aab8ce8fe5a523f215c837e"}, {"url": "https://git.kernel.org/stable/c/f468b7ee5d6332b01e6c538179a4c720e6dae93b"}, {"url": "https://git.kernel.org/stable/c/e797e252bfb3d0d4b3d38e4faef817e05869c240"}, {"url": "https://git.kernel.org/stable/c/7d6358ab02866e5b7ed8d3a00805297617bbb0ec"}], "title": "media: cx231xx: fix devres lifetime", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/media/usb/cx231xx/cx231xx-cards.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "a373f1a5137e96549a795e7fb9efb5de0ae1d065", "status": "affected", "version": "184a82784d50ad82aadc3917a3bdd8314a0e9b9b", "versionType": "git"}, {"lessThan": "c5ccb01eb1107acb6aab8ce8fe5a523f215c837e", "status": "affected", "version": "184a82784d50ad82aadc3917a3bdd8314a0e9b9b", "versionType": "git"}, {"lessThan": "f468b7ee5d6332b01e6c538179a4c720e6dae93b", "status": "affected", "version": "184a82784d50ad82aadc3917a3bdd8314a0e9b9b", "versionType": "git"}, {"lessThan": "e797e252bfb3d0d4b3d38e4faef817e05869c240", "status": "affected", "version": "184a82784d50ad82aadc3917a3bdd8314a0e9b9b", "versionType": "git"}, {"lessThan": "7d6358ab02866e5b7ed8d3a00805297617bbb0ec", "status": "affected", "version": "184a82784d50ad82aadc3917a3bdd8314a0e9b9b", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/media/usb/cx231xx/cx231xx-cards.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "3.17"}, {"lessThan": "3.17", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.148", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.101", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.42", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.6", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2-rc1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: cx231xx: fix devres lifetime\n\nUSB drivers bind to USB interfaces and any device managed resources\nshould have their lifetime tied to the interface rather than parent USB\ndevice. This avoids issues like memory leaks when drivers are unbound\nwithout their devices being physically disconnected (e.g. on probe\ndeferral or configuration changes).\n\nFix the driver state lifetime so that it is released on driver unbind."}], "id": "CVE-2026-68227", "lastModified": "2026-08-10T13:20:10.907", "metrics": {}, "published": "2026-08-10T13:20:10.907", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/7d6358ab02866e5b7ed8d3a00805297617bbb0ec"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/a373f1a5137e96549a795e7fb9efb5de0ae1d065"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/c5ccb01eb1107acb6aab8ce8fe5a523f215c837e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/e797e252bfb3d0d4b3d38e4faef817e05869c240"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f468b7ee5d6332b01e6c538179a4c720e6dae93b"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: media: cx231xx: fix devres lifetime", "id": "2513463", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2513463"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-772", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nmedia: cx231xx: fix devres lifetime\nUSB drivers bind to USB interfaces and any device managed resources\nshould have their lifetime tied to the interface rather than parent USB\ndevice. This avoids issues like memory leaks when drivers are unbound\nwithout their devices being physically disconnected (e.g. on probe\ndeferral or configuration changes).\nFix the driver state lifetime so that it is released on driver unbind.", "A flaw was found in the `cx231xx` media driver within the Linux kernel. This vulnerability arises from incorrect management of device-managed resources, where their lifetime is tied to the parent Universal Serial Bus (USB) device instead of the USB interface. This can lead to memory leaks when drivers are unbound without the associated devices being physically disconnected, potentially resulting in a Denial of Service (DoS)."], "name": "CVE-2026-68227", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-08-10T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-68227\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-68227\nhttps://lore.kernel.org/linux-cve-announce/2026081016-CVE-2026-68227-a1a8@gregkh/T"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[184a82784d50ad82aadc3917a3bdd8314a0e9b9b,a373f1a5137e96549a795e7fb9efb5de0ae1d065)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[184a82784d50ad82aadc3917a3bdd8314a0e9b9b,c5ccb01eb1107acb6aab8ce8fe5a523f215c837e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[184a82784d50ad82aadc3917a3bdd8314a0e9b9b,f468b7ee5d6332b01e6c538179a4c720e6dae93b)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[184a82784d50ad82aadc3917a3bdd8314a0e9b9b,e797e252bfb3d0d4b3d38e4faef817e05869c240)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[184a82784d50ad82aadc3917a3bdd8314a0e9b9b,7d6358ab02866e5b7ed8d3a00805297617bbb0ec)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "3.17"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,3.17)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.148,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.101,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.42,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.6,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-10T18:30:04.126006+00:00", "title": "cx231xx media driver devres lifetime memory leak causing memory exhaustion", "updated": "2026-08-13T07:45:17.034597+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}