{
  "affected": [
    {
      "ranges": [
        {
          "events": [
            {
              "introduced": "6f2a6ef86b23a30b92ad57981de537bce67bfa45"
            },
            {
              "fixed": "02e3a755086db847d795f2593ebc45e8ee4f1755"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "24f4ceeaeee7983c07590149556a0e33efe2ec90"
            },
            {
              "fixed": "441559d4c595f839b39f0ab6a4ae628427c2fd9e"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "612c8d21ce6e37b73f3106aec7ffa35959d40261"
            },
            {
              "fixed": "c88c030a324c9018b77894a19b2564eb66862020"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "35e8a426b16adbecae7a4e0e3c00fc8d0273db53"
            },
            {
              "fixed": "59dd34854202d9a3faaa87a85205e553fe7150e1"
            },
            {
              "fixed": "7cf79e8d682fe93777268f029668ce5e214237fd"
            },
            {
              "fixed": "f112ea910e554d58b4b39a4492b7d302f0f4204f"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "2f29dce5a5ae06a7db32e4491d72269329a86eeb"
            },
            {
              "last_affected": "28de6ca5276a94b0589ae1bf026b89fa0eaf14c0"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "6.1.149"
            },
            {
              "fixed": "6.1.184"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "6.6.103"
            },
            {
              "fixed": "6.6.148"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "6.12.43"
            },
            {
              "fixed": "6.12.101"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "6.15.11"
            },
            {
              "fixed": "6.16"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "6.16.2"
            },
            {
              "fixed": "6.17"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Linux",
        "name": "Kernel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.1.184"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.2.0"
            },
            {
              "fixed": "6.6.148"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.7.0"
            },
            {
              "fixed": "6.12.101"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.13.0"
            },
            {
              "fixed": "6.18.42"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.17.0"
            },
            {
              "fixed": "7.1.6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68181.json"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmei: bus: access mei_device under device_lock on cleanup\n\nFix couple of problems in mei_cl_bus_dev_release():\n\nmei_cl_flush_queues() is running without lock.\nbus-\u003efile_list access after mei_dev_bus_put(bus) can become a\nuse-after-free if this was the last reference to bus.\n\nProtect queues cleanup and WARN traversal by device lock there\nto avoid the concurrent access problems.\nMove WARN traversal before mei_dev_bus_put(bus).\n\nThis file uses bus variable name for mei_device, adjust\ncode of mei_cl_bus_dev_release() to use bus variable too.",
  "id": "CVE-2026-68181",
  "modified": "2026-08-25T03:51:31.272581944Z",
  "published": "2026-08-10T11:59:52.724Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/02e3a755086db847d795f2593ebc45e8ee4f1755"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/441559d4c595f839b39f0ab6a4ae628427c2fd9e"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/59dd34854202d9a3faaa87a85205e553fe7150e1"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/7cf79e8d682fe93777268f029668ce5e214237fd"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/c88c030a324c9018b77894a19b2564eb66862020"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/f112ea910e554d58b4b39a4492b7d302f0f4204f"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68181.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68181"
    },
    {
      "type": "PACKAGE",
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
    }
  ],
  "schema_version": "1.9.0",
  "summary": "mei: bus: access mei_device under device_lock on cleanup"
}