Cloudanix VulnDB

CVE-2026-68227

None

CVSS

—

EPSS

0.2%

Published

Aug 10, 2026

CISA due date

—

Cloudanix analysis

Schedule a fix SSVC: Track

A Linux USB driver for some video devices could slowly leak memory when the software stops using the device without unplugging it, eventually making the computer unstable.

Exploitation
Local Privilege
Attacker needs
Low Privilege
Complexity
Theoretical
Impact
Denial Of Service
Component
OS kernel
Class
Other
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

Improper tying of device-managed resources to the parent USB device rather than the interface in the cx231xx driver, causing state to remain allocated after unbind without physical disconnect.

Why it matters to the business

Repeated driver reloads or configuration changes on affected systems can gradually exhaust kernel memory, leading to degraded performance or crashes in media-capture or USB-handling workloads.

How an attack unfolds

An attacker with local access triggers repeated probe deferrals or interface unbind events on a system using the cx231xx driver, accumulating unreleased resources until memory pressure causes denial of service.

How to fix it

Update the Linux kernel to a version containing the devres lifetime fix for the cx231xx driver so that resources are released on interface unbind.

How to confirm the fix worked

Confirm the running kernel contains the upstream commit correcting devres lifetime; test repeated driver unbind operations and verify memory usage returns to baseline.

Typical attack path

  1. Locate a system exposing the cx231xx USB media driver
  2. Induce repeated bind/unbind cycles via configuration changes or deferred probing
  3. Accumulate leaked kernel memory across cycles
  4. Trigger resource exhaustion resulting in system instability

How to detect it

Inspect kernel logs for repeated cx231xx bind/unbind sequences and correlate them with unexplained increases in kernel memory consumption.

What your security team should do

  • Apply the corrected kernel version as part of routine patching
  • Monitor kernel memory statistics during USB device reconfiguration events
  • Restrict unprivileged users from performing USB configuration changes where feasible

The record

In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: fix devres lifetime USB drivers bind to USB interfaces and any device managed resources should have their lifetime tied to the interface rather than parent USB device. This avoids issues like memory leaks when drivers are unbound without their devices being physically disconnected (e.g. on probe deferral or configuration changes). Fix the driver state lifetime so that it is released on driver unbind.

Affected packages

Ecosystem Package Introduced Fixed