CVE-2026-68084 PUBLISHED

staging: vme_user: fix location monitor leak in tsi148 bridge

Assigner: Linux
Reserved: 30.07.2026 Published: 10.08.2026 Updated: 10.08.2026

In the Linux kernel, the following vulnerability has been resolved:

staging: vme_user: fix location monitor leak in tsi148 bridge

tsi148_probe() allocates a location monitor resource and links it into tsi148_bridge->lm_resources. The probe error path frees this list, but tsi148_remove() only frees the dma, slave and master resource lists, so the location monitor resource is leaked on device unbind or module unload.

Free the lm_resources list in tsi148_remove() as well, before tsi148_bridge is freed.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from d22b8ed9a3b0a157b732580258ec16b729265953 to 18be0ad31b161a8b6fbc90d14355ad40c061b6b0 (excl.)
  • affected from d22b8ed9a3b0a157b732580258ec16b729265953 to eef048dd77ebfbf99d7c28f9e9dd331d2af7b6f6 (excl.)
  • affected from d22b8ed9a3b0a157b732580258ec16b729265953 to 36902ab588ccc2fa07994adf6c5f51cbfe379177 (excl.)
  • affected from d22b8ed9a3b0a157b732580258ec16b729265953 to e3ceafa6d8ee6b3a0f7fabe7a551fda909edbd46 (excl.)
  • affected from d22b8ed9a3b0a157b732580258ec16b729265953 to c6cda17e98545980e42291fc4282daa8a8ebe384 (excl.)
  • affected from d22b8ed9a3b0a157b732580258ec16b729265953 to 151edde741f8bc7f2931c5f44ab376d32b0c8beb (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 2.6.32 is affected
  • unaffected from 0 to 2.6.32 (excl.)
  • unaffected from 6.1.178 to 6.1.* (incl.)
  • unaffected from 6.6.145 to 6.6.* (incl.)
  • unaffected from 6.12.96 to 6.12.* (incl.)
  • unaffected from 6.18.39 to 6.18.* (incl.)
  • unaffected from 7.1.4 to 7.1.* (incl.)
  • unaffected from 7.2-rc3 to * (incl.)

References