CVE-2026-64496 iio: event: Fix event FIFO reset race

In the Linux kernel, the following vulnerability has been resolved: iio: event: Fix event FIFO reset race iioeventgetfd creates the event file descriptor with anoninodegetfd, which allocates a new fd, creates the anonymous file and installs it in the process fd table before returning to the calle...

CVE-2026-64497

CVE-2026-64497 affects the Linux kernel in the iio: chemical scd30 driver. The issue stems from a sign-extension bug that could corrupt the exponent when processing float32, caused by bitwise operations involving ~BIT(31). The fix adds FIELD_GET() usage via linux/bitfield.h and introduces new mac...

CVE-2026-64496

The CVE-2026-64496 issue affects the Linux kernel IIO event (iio: event) where a race between kfifo_to_user and kfifo_reset_out could lead to an out-of-bounds read and leakage of kernel memory to userspace. Root cause: iio_event_getfd() uses anon_inode_getfd() to allocate and install a new FD, th...

EUVD-2026-48839

In the Linux kernel, the following vulnerability has been resolved: iio: gyro: bmg160: bail out when bandwidth/filter is not in table bmg160getfilter walks bmg160sampfreqtable looking for the entry matching the bwbits value read from the chip: for i = 0; i ARRAYSIZEbmg160sampfreqtable; ++i if...

CVE-2026-64495

CVE-2026-64495 affects the Linux kernel iio:gyro/bmg160 driver. The bug occurs in bmg160_get_filter()/bmg160_set_filter() when a bandwidth/filter value read from the chip or provided by userspace does not have a matching entry in the bmg160_samp_freq_table[]. If no match is found, the code reads ...

CVE-2026-64494 iio: light: gp2ap002: fix runtime PM leak on read error

In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002readraw calls pmruntimegetsync before reading the lux value, but if gp2ap002getlux fails, it returns directly. This skips the pmruntimeputautosuspend call at the "ou...

CVE-2026-64493 iio: pressure: mpl115: fix runtime PM leak on read error

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: mpl115: fix runtime PM leak on read error mpl115readraw takes a runtime PM reference with pmruntimegetsync before reading the processed pressure or raw temperature, but on the read error path it returns without...

CVE-2026-64494

The CVE-2026-64494 issue affects the Linux kernel IIO driver for gp2ap002 (iio: light). The root cause is that gp2ap002_read_raw() calls pm_runtime_get_sync() before reading the lux value, and if gp2ap002_get_lux() fails, the function returns early, bypassing pm_runtime_put_autosuspend() and perm...

CVE-2026-64493

The CVE-2026-64493 issue affects the Linux kernel iio: pressure: mpl115 subsystem. The vulnerability arises in mpl115_read_raw() which takes a runtime PM reference via pm_runtime_get_sync() before reading processed pressure or raw temperature; on read errors it can return without pm_runtime_put_a...

CVE-2026-64492

CVE-2026-64492 affects the Linux kernel iio: temperature tmp006 driver. The issue arises when tmp006_probe() allocates the DRDY trigger with devm_iio_trigger_alloc() but registers it with iio_trigger_register() and lacks a .remove() callback, leaving a dangling trigger entry after module unload. ...

CVE-2026-64492

In the Linux kernel, the following vulnerability has been resolved: iio: temperature: tmp006: use devmiiotriggerregister tmp006probe allocates the DRDY trigger with devmiiotriggeralloc but registers it with plain iiotriggerregister. The driver has no .remove callback, so on module unload the...

CVE-2026-64492 iio: temperature: tmp006: use devm_iio_trigger_register

In the Linux kernel, the following vulnerability has been resolved: iio: temperature: tmp006: use devmiiotriggerregister tmp006probe allocates the DRDY trigger with devmiiotriggeralloc but registers it with plain iiotriggerregister. The driver has no .remove callback, so on module unload the...

Linux Distros Unpatched Vulnerability : CVE-2026-64496

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: event: Fix event FIFO reset race iioeventgetfd creates the event file descriptor with anoninodegetfd, which allocates a new fd, creates the anonymous file...

Linux Distros Unpatched Vulnerability : CVE-2026-64492

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: temperature: tmp006: use devmiiotriggerregister tmp006probe allocates the DRDY trigger with devmiiotriggeralloc but registers it with plain...

Linux Distros Unpatched Vulnerability : CVE-2026-64495

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: gyro: bmg160: bail out when bandwidth/filter is not in table bmg160getfilter walks bmg160sampfreqtable looking for the entry matching the bwbits value rea...

Linux Distros Unpatched Vulnerability : CVE-2026-64498

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: free scanmask on buffer release The scanmask lifetime changed in...

PT-2026-64718

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: scd30: Cleanup initializations and fix sign-extension bug Include linux/bitfield.h for FIELD GET. Create new macros for bit manipulation in combination with manual bit manipulation being replaced with FIELD GET. Th...

PT-2026-64717

In the Linux kernel, the following vulnerability has been resolved: iio: event: Fix event FIFO reset race iio event getfd creates the event file descriptor with anon inode getfd, which allocates a new fd, creates the anonymous file and installs it in the process fd table before returning to the...

PT-2026-64724

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxsd9: fix runtime PM imbalance on write raw error kxsd9 write raw takes a runtime PM reference with pm runtime get sync but returns -EINVAL directly when a scale with a non-zero integer part is requested, skipping th...

Linux Distros Unpatched Vulnerability : CVE-2026-64494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002readraw calls pmruntimegetsync before reading the lux value, but if gp2ap002getlux fails, it...