01 Record

CVE-2026-68181

mei: bus: access mei_device under device_lock on cleanup

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

mei: bus: access mei_device under device_lock on cleanup

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.21% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 11.3% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Received. NVD last modified this record on 2026-08-23.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-08-10 11:59Z2 MO AGO

Last updated

2026-08-23 12:46Z2 MO AGO

Reserved

2026-07-30

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-364Signal Handler Race ConditionBase

Data version

5.2

Document digest

111153d7b3409bfa9c34b4505252d4923abd38cde89cdaaa322cb1faa8877283

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux6f2a6ef86b23a30b92ad57981de537bce67bfa45 to < 02e3a755086db847d795f2593ebc45e8ee4f1755, 24f4ceeaeee7983c07590149556a0e33efe2ec90 to < 441559d4c595f839b39f0ab6a4ae628427c2fd9e, 612c8d21ce6e37b73f3106aec7ffa35959d40261 to < c88c030a324c9018b77894a19b2564eb66862020, 35e8a426b16adbecae7a4e0e3c00fc8d0273db53 to < 59dd34854202d9a3faaa87a85205e553fe7150e1, 35e8a426b16adbecae7a4e0e3c00fc8d0273db53 to < 7cf79e8d682fe93777268f029668ce5e214237fd, 35e8a426b16adbecae7a4e0e3c00fc8d0273db53 to < f112ea910e554d58b4b39a4492b7d302f0f4204f, 2f29dce5a5ae06a7db32e4491d72269329a86eeb, 28de6ca5276a94b0589ae1bf026b89fa0eaf14c0, 6.1.149 to < 6.1.184, 6.6.103 to < 6.6.148, 6.12.43 to < 6.12.101, 6.15.11 to < 6.16, 6.16.2 to < 6.17, 6.17—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/02e3a755086db847d795f2593ebc45e8ee4f1755
git.kernel.orghttps://git.kernel.org/stable/c/441559d4c595f839b39f0ab6a4ae628427c2fd9e
git.kernel.orghttps://git.kernel.org/stable/c/c88c030a324c9018b77894a19b2564eb66862020
git.kernel.orghttps://git.kernel.org/stable/c/59dd34854202d9a3faaa87a85205e553fe7150e1
git.kernel.orghttps://git.kernel.org/stable/c/7cf79e8d682fe93777268f029668ce5e214237fd
git.kernel.orghttps://git.kernel.org/stable/c/f112ea910e554d58b4b39a4492b7d302f0f4204f

07 Fixed in

Debian 12

linux
Fixed in 6.1.187-1
linux-6.12
Fixed in 6.12.101-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.101-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.1.6-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.