CVE-2026-68181

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> mei: bus: access mei_device under device_lock on cleanup<br /> <br /> Fix couple of problems in mei_cl_bus_dev_release():<br /> <br /> mei_cl_flush_queues() is running without lock.<br /> bus-&gt;file_list access after mei_dev_bus_put(bus) can become a<br /> use-after-free if this was the last reference to bus.<br /> <br /> Protect queues cleanup and WARN traversal by device lock there<br /> to avoid the concurrent access problems.<br /> Move WARN traversal before mei_dev_bus_put(bus).<br /> <br /> This file uses bus variable name for mei_device, adjust<br /> code of mei_cl_bus_dev_release() to use bus variable too.