CVE intelligence

CVE-2026-68357

Vulnerability intelligence

Published Aug 10, 2026Sources checked Oct 28, 2026

N/ACVSS not listedScore unavailable

What this means

Review the available evidence

CVE-2026-68357. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.

What to do next

Vendor revision: Aug 14, 2026

CBL-Mariner Releases

Vendor-listed releases

CISA KEVNot listedBased on the latest collected catalog

EPSS0.2%Estimated 30-day exploitation probability

Ransomware useNot markedCISA KEV ransomware field

Threat actors0Source-linked actor relationships

Overview

In the Linux kernel, the following vulnerability has been resolved:

watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()

When a watchdog governor is unregistered, it updates existing watchdog devices that were using this governor by falling back to `default_gov`.

If the governor being unregistered is currently set as `default_gov`, the `default_gov` is never cleared. This leads to 2 use-after-free issues: 1.

New watchdog devices registered after this point will inherit the dangling `default_gov`. 2.

Existing watchdog devices using the unregistered governor will have their `wdd->gov` reassigned to the dangling `default_gov`.

Fix the UAF by clearing `default_gov` if it matches the governor being unregistered.

Source: NVD