CVE-2026-68181

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the mei cl bus dev release() function where mei cl flush queues() executes without a lock. Additionally, accessing bus->file list after the execution of mei dev bus put(bus) can lead to a use-after-free condition if the last reference to the bus is released. A use-after-free is a memory corruption issue where an application continues to use a pointer after it has been freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.