PT-2026-64719 · Linux · Linux
CVE-2026-64498
·
Published
2026-07-25
·
Updated
2026-07-25
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
iio: buffer: hw-consumer: free scan mask on buffer release
The scan mask lifetime changed in commit 9a2e1233d38c ("iio: buffer:
hw-consumer: remove redundant scan mask flexible array").
Before that change, the scan mask storage was embedded in struct
hw consumer buffer, so iio hw buf release() could free the whole
allocation with a single kfree(hw buf).
That commit moved the scan mask to a separate bitmap zalloc() allocation
stored in buffer.scan mask, but left iio hw buf release() unchanged.
Free the scan mask in iio hw buf release() before freeing the buffer
wrapper.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux