Vulnerability of the iio_device_unregister() function in the drivers/iio/industrialio-core.c module – The driver supports various types of built-in sensors in the Linux operating system, allowing a hacker to cause a service failure.

🗓️ 09 May 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

Vulnerability in iio_device_unregister in industrialio-core.c allows memory to be freed twice.

Reporter	Title	Published	Views	Family All 16
Circl	CVE-2021-46979	29 Feb 202410:11	–	circl
CNNVD	Linux kernel security vulnerabilities	28 Feb 202400:00	–	cnnvd
CVE	CVE-2021-46979	28 Feb 202408:13	–	cve
Cvelist	CVE-2021-46979 iio: core: fix ioctl handlers removal	28 Feb 202408:13	–	cvelist
Debian CVE	CVE-2021-46979	28 Feb 202408:13	–	debiancve
NVD	CVE-2021-46979	28 Feb 202409:15	–	nvd
OSV	UBUNTU-CVE-2021-46979	28 Feb 202409:15	–	osv
Prion	Double free	28 Feb 202409:15	–	prion
Positive Technologies	PT-2024-11088 · Linux · Linux Kernel	10 May 202100:00	–	ptsecurity
Tenable Nessus	RHEL 6 : kernel (Unpatched Vulnerability)	11 May 202400:00	–	nessus

Source	Link
git	www.git.kernel.org/stable/c/11e1cae5da4096552f7c091476cbadbc0d1817da
git	www.git.kernel.org/stable/c/901f84de0e16bde10a72d7eb2f2eb73fcde8fa1a
git	www.git.kernel.org/stable/c/ab6c935ba3a04317632f3b8b68675bdbaf395303
lore	www.lore.kernel.org/linux-cve-announce/2024022823-CVE-2021-46979-de90@gregkh/T/
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
git	www.git.kernel.org/linus/901f84de0e16bde10a72d7eb2f2eb73fcde8fa1a
cve	www.cve.org/CVERecord
lore	www.lore.kernel.org/linux-cve-announce/2024022823-CVE-2021-46979-de90@gregkh/
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.22
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.5

09 May 2025 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 24.6

CVSS 35.5

EPSS0.00222

iio device unregister industrialio core memory double free linux sensor driver