CVE-2026-68178

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the NSM misc device where nsm dev fops.owner is left unset. When misc open() is called, it uses fops get() to pin the file operations::owner, but because the owner is unset, opening /dev/nsm fails to take a module reference on the nsm driver. If the driver is utilized as a module, an open file descriptor can remain active after the module is removed via rmmod. Subsequently, performing an ioctl operation through that descriptor can lead to the execution of code from the unloaded module text.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.