CVE-2026-68180

A flaw was found in the intel_th (Intel Trace Hub) driver within the Linux kernel. This vulnerability occurs because the intel_th_output_open() function acquires a device reference that is not properly released by the intel_th_msc_release() function when handling Message Signaled Interrupt (MSC) outputs. Consequently, each successful MSC output open operation leads to a device reference leak. A local attacker could repeatedly trigger this memory leak, potentially exhausting system resources and causing a Denial of Service (DoS).

This issue affects Intel Trace Hub (intel_th). MSC output device reference from bus_find_device_by_devt() is never dropped. Systems without Intel TH hardware are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.