SB2026081311 - Improper resource shutdown or release in Linux kernel staging vme_user driver
Published: August 13, 2026
Security Bulletin ID
SB2026081311
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Partial DoS
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Improper resource shutdown or release (CVE-ID: CVE-2026-68084)
CWE-ID: CWE-404 - Improper Resource Shutdown or Release
CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to improper resource shutdown or release in the tsi148_remove() function in the vme_user tsi148 bridge driver when unbinding the device or unloading the module. A local user can trigger device removal operations to cause a denial of service.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/151edde741f8bc7f2931c5f44ab376d32b0c8beb
- https://git.kernel.org/stable/c/18be0ad31b161a8b6fbc90d14355ad40c061b6b0
- https://git.kernel.org/stable/c/36902ab588ccc2fa07994adf6c5f51cbfe379177
- https://git.kernel.org/stable/c/c6cda17e98545980e42291fc4282daa8a8ebe384
- https://git.kernel.org/stable/c/e3ceafa6d8ee6b3a0f7fabe7a551fda909edbd46
- https://git.kernel.org/stable/c/eef048dd77ebfbf99d7c28f9e9dd331d2af7b6f6