Heimdall Security Logo

CVE-2026-68180

Vulnérabilité non évaluée dans Linux (Linux)

CVSS 0.0 · Non évaluée
EPSS 0.2%
Linux•Linux•Versions : <=6.1.*, <=6.12.*, <761b785a0cfbce43761227bc42a7f984f31f8921, <6.19, <c3a28f9cb82425fe0835048ed3677f321e780691, <5.10.265, 6.12.101, b71e64ef7ff9443835d1333e3e80ab1e49e5209f, 0, <6.6.148, <5.15.216, 5.15.199, <=7.1.*, <caba30eb8bd321c465ecfc7d850ee85f5b353496, <df55842fddbcdb80e6dd16680439c0f780ed592e, 5.15.216, <6.12.101, <=5.10.*, <=6.6.*, 5.10.249, 6.18.8, <26e27b8dcef1e4df6f30d8f25b3304a506d482b3, 6.18.42, 7.1.6, 64015cbf06e8bb75b81ae95b997e847b55280f7f, <6.1.183, 6.1.183, f9b059bda4276f2bb72cb98ec7875a747f042ea2, 0fca16c5591534cc1fec8b6181277ee3a3d0f26c, 6.1.162, <141641a70ed337e54487f766ede745fc2ce44c42, <=6.18.*, 95fc36a234da24bbc5f476f8104a5a15f99ed3e3, af4b9467296b9a16ebc008147238070236982b6d, 6.12.68, <6.18.42, <12ad4fad748e6e563ff4480f03b89134a41b5c37, <=*, <=5.15.*, 6.19, <ddcf2064d7ec5a8c9afa7cb74442320e443502bc, bf7785434b5d05d940d936b78925080950bd54dd, 6.6.122, 5.10.265, 6.6.148, 7.2

Description

In the Linux kernel, the following vulnerability has been resolved: intel_th: fix MSC output device reference leak intel_th_output_open() looks up the output device with bus_find_device_by_devt(), which returns the device with a reference that must be dropped after use. commit 95fc36a234da ("intel_th: fix device leak on output open()") attempted to drop the reference from intel_th_output_release(). However, a successful open replaces file->f_op with the output driver file operations before returning, so close runs the output driver release callback instead. For MSC outputs, close runs intel_th_msc_release(), which only removes the per-file iterator and does not drop the device reference taken by intel_th_output_open(). Consequently, every successful MSC output open leaks one device reference. Drop the device reference from intel_th_msc_release(), which is the release path actually used for MSC output files. Remove the now-unused intel_th_output_release() callback from intel_th_output_fops.

Gravité et risque d'exploitation

CVE-2026-68180 obtient un score CVSS de 0.0/10, soit une gravité non évaluée. Selon le modèle EPSS, la probabilité qu'elle soit exploitée dans les 30 prochains jours est de 0.22 %, ce qui la place devant 11.4 % des CVE référencées.

Que faire ?

  • Vérifiez si Linux (versions <=6.1.*, <=6.12.*, <761b785a0cfbce43761227bc42a7f984f31f8921, <6.19, <c3a28f9cb82425fe0835048ed3677f321e780691, <5.10.265, 6.12.101, b71e64ef7ff9443835d1333e3e80ab1e49e5209f, 0, <6.6.148, <5.15.216, 5.15.199, <=7.1.*, <caba30eb8bd321c465ecfc7d850ee85f5b353496, <df55842fddbcdb80e6dd16680439c0f780ed592e, 5.15.216, <6.12.101, <=5.10.*, <=6.6.*, 5.10.249, 6.18.8, <26e27b8dcef1e4df6f30d8f25b3304a506d482b3, 6.18.42, 7.1.6, 64015cbf06e8bb75b81ae95b997e847b55280f7f, <6.1.183, 6.1.183, f9b059bda4276f2bb72cb98ec7875a747f042ea2, 0fca16c5591534cc1fec8b6181277ee3a3d0f26c, 6.1.162, <141641a70ed337e54487f766ede745fc2ce44c42, <=6.18.*, 95fc36a234da24bbc5f476f8104a5a15f99ed3e3, af4b9467296b9a16ebc008147238070236982b6d, 6.12.68, <6.18.42, <12ad4fad748e6e563ff4480f03b89134a41b5c37, <=*, <=5.15.*, 6.19, <ddcf2064d7ec5a8c9afa7cb74442320e443502bc, bf7785434b5d05d940d936b78925080950bd54dd, 6.6.122, 5.10.265, 6.6.148, 7.2) est présent sur votre parc.
  • Appliquez le correctif ou la version corrigée indiqués dans les références de l'éditeur.
  • À défaut de correctif, limitez l'exposition (filtrage réseau, désactivation du composant).
  • Automatisez la détection : les agents CVE Heimdall (gratuits, open source) corrèlent l'inventaire de vos serveurs avec la base CVE.

Références

Rechercher une autre CVE