PT-2026-64713 · Linux · Linux

CVE-2026-64492 · Publicado 2026-07-25 · Atualizado 2026-07-25

Mitre

In the Linux kernel, the following vulnerability has been resolved:

iio: temperature: tmp006: use devm iio trigger register

tmp006 probe() allocates the DRDY trigger with devm iio trigger alloc() but registers it with plain iio trigger register(). The driver has no .remove() callback, so on module unload the trigger stays in the global trigger list while its memory is freed by devm, leaving a dangling entry.

Switch to devm iio trigger register() so the registration is undone in the same devm scope as the allocation.

Identificadores relacionados

CVE-2026-64492

Produtos afetados

Linux

Referências · 4

• https://git.kernel.org/stable/c/a4f8491da9563ba6eb77969ac26fc7052114c476 · Nota
• https://git.kernel.org/stable/c/3c5eed894efd93d68d7f6a359a81ddef0e928774 · Nota
• https://git.kernel.org/stable/c/d90f868f56a16e10eedc6552f48d99dff4d275b7 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-64492 · Nota de Segurança