Security Advisory

CVE-2026-68371

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-10 12:03:49
Last updated 2026-08-23 12:46:19
Assigner Linux
CVSS score 8.4
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Do not put borrowed of_node in probe omap2430_probe() stores pdev->dev.of_node in a local np variable. This is a borrowed pointer and the probe function does not take a reference to it. The success and error paths nevertheless call of_node_put(np). This drops a reference that is owned by the platform device, and can leave pdev->dev.of_node with an unbalanced reference count. Do not put the borrowed platform device node from omap2430_probe(). References taken for the child MUSB device are handled by the device core, and the ctrl-module phandle reference is still released separately.