CVE-2026-89938

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: atlas-sensor: use iiotriggerpollnested to fix remove UAF The atlas driver requests its hardware data-ready IRQ with devmrequestthreadedirq; its threaded handler queues an irqwork, atlasworkhandler, that calls...

CVE-2026-89939

In the Linux kernel 's iio: chemical: atlas-sensor driver, atlas_buffer_postenable() acquires a runtime PM reference via pm_runtime_resume_and_get() but returns the result of atlas_set_interrupt() directly. If that call fails, the reference is leaked , preventing the device from ever autosuspendi...

CVE-2026-89938

CVE-2026-89938 is a use-after-free (UAF) in the Linux kernel's IIO chemical atlas-sensor driver. When the driver is removed, the devm-managed IRQ is freed via free_irq() during the devres unwind, but a pending irq_work (atlas_work_handler) is not flushed first. If a buffer is enabled, the handler...

CVE-2026-89938 iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: atlas-sensor: use iiotriggerpollnested to fix remove UAF The atlas driver requests its hardware data-ready IRQ with devmrequestthreadedirq; its threaded handler queues an irqwork, atlasworkhandler, that calls...

EUVD-2026-80539

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable atlasbufferpostenable acquires a runtime PM reference with pmruntimeresumeandget but returns the result of atlassetinterrupt directly. If atlassetinterrupt...

EUVD-2026-80538

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: atlas-sensor: use iiotriggerpollnested to fix remove UAF The atlas driver requests its hardware data-ready IRQ with devmrequestthreadedirq; its threaded handler queues an irqwork, atlasworkhandler, that calls...