PT-2026-69575

CVE-2026-68175

·

Published

2026-08-10

·

Updated

2026-10-21

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A resource leak exists in the mmiotrace tracer when the trace pipe is closed. The mmio pipe open() function allocates a header iter and takes a pci dev reference upon opening the trace pipe. While mmio close() is designed to free these resources, it was only linked to the .close callback. Because tracing release pipe() invokes the .pipe close callback instead of .close when the file is released, the header iter allocation is leaked and a stale pci dev reference remains. This can lead to a massive memory leak if the trace pipe is opened and closed repeatedly without being read to completion.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
CLSA-2026-1788168285
CLSA-2026-1789141176
CLSA-2026-1791730242
CLSA-2026-1791796397
CLSA-2026-1791796862
USN-8875-1
USN-8875-2
USN-8876-1
USN-8877-1
USN-8878-1
USN-8879-1
USN-8887-1
USN-8887-2
USN-8887-3
USN-8888-1
USN-8888-2
USN-8889-1
USN-8917-1
USN-8918-1
Found an issue in the description? Have something to add? Feel free to write us 👾