AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-68371

HIGH · CVSS 8.4 EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-08-10 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

A vulnerability in the Linux kernel affects the omap2430_probe() function, which improperly manages a borrowed pointer to the device node, leading to an unbalanced reference count. This mismanagement can potentially result in memory leaks or crashes, impacting system stability. Linux distributions utilizing the affected kernel version should prioritize patching this issue to maintain system integrity and performance.

CVE
CVE-2026-68371
Severity
HIGH
CVSS
8.4
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Do not put borrowed of_node in probe omap2430_probe() stores pdev->dev.of_node in a local np variable. This is a borrowed pointer and the probe function does not take a reference to it. The success and error paths nevertheless call of_node_put(np). This drops a reference that is owned by the platform device, and can leave pdev->dev.of_node with an unbalanced reference count. Do not put the borrowed platform device node from omap2430_probe(). References taken for the child MUSB device are handled by the device core, and the ctrl-module phandle reference is still released separately.