In the Linux kernel, the following vulnerability has been resolved:
mei: bus: access meidevice under devicelock on cleanup
Fix couple of problems in meiclbusdevrelease():
meiclflushqueues() is running without lock. bus->filelist access after meidevbus_put(bus) can become a use-after-free if this was the last reference to bus.
Protect queues cleanup and WARN traversal by device lock there to avoid the concurrent access problems. Move WARN traversal before meidevbus_put(bus).
This file uses bus variable name for meidevice, adjust code of meiclbusdev_release() to use bus variable too.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68181.json",
"cna_assigner": "Linux"
}