U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. Vulnerabilities

CVE-2026-68180 Detail

Description

In the Linux kernel, the following vulnerability has been resolved: intel_th: fix MSC output device reference leak intel_th_output_open() looks up the output device with bus_find_device_by_devt(), which returns the device with a reference that must be dropped after use. commit 95fc36a234da ("intel_th: fix device leak on output open()") attempted to drop the reference from intel_th_output_release(). However, a successful open replaces file->f_op with the output driver file operations before returning, so close runs the output driver release callback instead. For MSC outputs, close runs intel_th_msc_release(), which only removes the per-file iterator and does not drop the device reference taken by intel_th_output_open(). Consequently, every successful MSC output open leaks one device reference. Drop the device reference from intel_th_msc_release(), which is the release path actually used for MSC output files. Remove the now-unused intel_th_output_release() callback from intel_th_output_fops.


Metrics

 
NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.
CVSS 4.0 Severity and Vector Strings:

NIST CVSS score
NIST: NVD
N/A
NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL Source(s) Tag(s)
https://git.kernel.org/stable/c/12ad4fad748e6e563ff4480f03b89134a41b5c37 kernel.org
https://git.kernel.org/stable/c/141641a70ed337e54487f766ede745fc2ce44c42 kernel.org
https://git.kernel.org/stable/c/26e27b8dcef1e4df6f30d8f25b3304a506d482b3 kernel.org
https://git.kernel.org/stable/c/761b785a0cfbce43761227bc42a7f984f31f8921 kernel.org
https://git.kernel.org/stable/c/c3a28f9cb82425fe0835048ed3677f321e780691 kernel.org
https://git.kernel.org/stable/c/caba30eb8bd321c465ecfc7d850ee85f5b353496 kernel.org
https://git.kernel.org/stable/c/ddcf2064d7ec5a8c9afa7cb74442320e443502bc kernel.org
https://git.kernel.org/stable/c/df55842fddbcdb80e6dd16680439c0f780ed592e kernel.org

Weakness Enumeration

CWE-ID CWE Name Source

Change History

3 change records found show changes

Quick Info

CVE Dictionary Entry:
CVE-2026-68180
NVD Published Date:
08/10/2026
NVD Last Modified:
08/19/2026
Source:
kernel.org