CVE-2026-68084

Summary

In the Linux kernel, the following vulnerability has been resolved:

staging: vme_user: fix location monitor leak in tsi148 bridge

tsi148_probe() allocates a location monitor resource and links it into tsi148_bridge->lm_resources. The probe error path frees this list, but tsi148_remove() only frees the dma, slave and master resource lists, so the location monitor resource is leaked on device unbind or module unload.

Free the lm_resources list in tsi148_remove() as well, before tsi148_bridge is freed.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxd22b8ed9a3b0a157b732580258ec16b729265953 < 18be0ad31b161a8b6fbc90d14355ad40c061b6b0affected
LinuxLinuxd22b8ed9a3b0a157b732580258ec16b729265953 < eef048dd77ebfbf99d7c28f9e9dd331d2af7b6f6affected
LinuxLinuxd22b8ed9a3b0a157b732580258ec16b729265953 < 36902ab588ccc2fa07994adf6c5f51cbfe379177affected
LinuxLinuxd22b8ed9a3b0a157b732580258ec16b729265953 < e3ceafa6d8ee6b3a0f7fabe7a551fda909edbd46affected
LinuxLinuxd22b8ed9a3b0a157b732580258ec16b729265953 < c6cda17e98545980e42291fc4282daa8a8ebe384affected
LinuxLinuxd22b8ed9a3b0a157b732580258ec16b729265953 < 151edde741f8bc7f2931c5f44ab376d32b0c8bebaffected
LinuxLinux2.6.32affected
LinuxLinux0 < 2.6.32unaffected
LinuxLinux6.1.178 <= 6.1.*unaffected
LinuxLinux6.6.145 <= 6.6.*unaffected
LinuxLinux6.12.96 <= 6.12.*unaffected
LinuxLinux6.18.39 <= 6.18.*unaffected
LinuxLinux7.1.4 <= 7.1.*unaffected
LinuxLinux7.2-rc3 <= *unaffected

Weaknesses

References