Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: free iio for atombios when driver shutdown Fix below kmemleak when unload radeon driver: unreferenced object 0xffff9f8608ede200 size 512: comm "systemd-udevd", pid 326, jiffies 4294682822 age 716.338s hex dump first 3...

kernel: iio: event: Fix event FIFO reset race

A flaw was found in the Linux kernel's Industrial I/O IIO event subsystem. A local user can exploit a race condition during the reset of the event FIFO First-In, First-Out buffer. This occurs when another thread accesses a newly allocated file descriptor before the FIFO reset is complete. This ca...

CVE-2026-64498

A flaw was found in the Linux kernel's Industrial I/O IIO subsystem, specifically within the hardware consumer buffer hw-consumer. Due to an oversight in memory management, a dedicated memory region scanmask was not properly released when its associated buffer was freed. A local attacker with low...

SUSE CVE-2026-64503

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxsd9: fix runtime PM imbalance on writeraw error kxsd9writeraw takes a runtime PM reference with pmruntimegetsync but returns -EINVAL directly when a scale with a non-zero integer part is requested, skipping the...

CVE-2026-64498

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: free scanmask on buffer release The scanmask lifetime changed in commit 9a2e1233d38c "iio: buffer: hw-consumer: remove redundant scanmask flexible array". Before that change, the scan mask storage was...

CVE-2026-64504

Summary: CVE-2026-64504 affects the Linux kernel IIO driver for the BMC150 accelerometer. The flush path in __bmc150_accel_fifo_flush() could transfer up to count samples from the device FIFO, with count derived from FIFO_STATUS masked to 7 bits (0–127). The on-stack buffer can overflow if a devi...

CVE-2026-64498

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: free scanmask on buffer release The scanmask lifetime changed in commit 9a2e1233d38c "iio: buffer: hw-consumer: remove redundant scanmask flexible array". Before that change, the scan mask storage was...

Linux Distros Unpatched Vulnerability : CVE-2026-64501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iio: adc: adsigmadelta: fix CS held asserted and state leaks In adsigmadeltasingleconversion...

PT-2026-64719

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Industrial I/O IIO buffer hardware consumer where the scan mask is not properly freed during buffer release. This occurred because the scan mask storage was moved ...

CVE-2026-63931

A flaw was found in the Linux kernel's iio: chemical: scd30 driver. A local user can trigger a denial of service DoS by writing a zero fractional part to the samplingfrequency sysfs attribute. This action leads to a division-by-zero error within the kernel, causing the system to crash...

CVE-2026-63930

A flaw was found in the Linux kernel's Industrial I/O IIO hardware consumer buffer component. This use-after-free vulnerability occurs in the errputbuffers cleanup path of iiohwconsumeralloc. During buffer cleanup, the code incorrectly uses listforeachentry to iterate through buffers while...

SUSE CVE-2026-63966

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16550: fix stack leak in trigger handler adis16550triggerhandler declares the scan data array on the stack without initializing it. The memcpy at the bottom fills only the first 28 bytes TEMP + 6 channels of...

CVE-2026-63966

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16550: fix stack leak in trigger handler adis16550triggerhandler declares the scan data array on the stack without initializing it. The memcpy at the bottom fills only the first 28 bytes TEMP + 6 channels of...

EUVD-2026-45703

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: fix use-after-free in error path In the errputbuffers cleanup path of iiohwconsumeralloc, the code was using listforeachentry to iterate through buffers while calling iiobufferput which can free the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: iio: light: cm3605: Fixed an error handling path in cm3605probe. The commit in “Fixes” also introduced a new error handling path, which should replace the existing one. Otherwise, some resources may be leaked...

CVE-2026-43356

A flaw was found in the Linux kernel's Industrial I/O IIO subsystem, specifically within the Analog Devices ADIS Inertial Measurement Unit IMU drivers adis16480, adis16490, adis16545. When these drivers are initialized, a NULL pointer dereference occurs in the adisinit function because the adis-o...

SUSE CVE-2026-23092

In the Linux kernel, the following vulnerability has been resolved: iio: dac: ad3552r-hs: fix out-of-bound write in ad3552rhswritedatasource When simplewritetobuffer succeeds, it returns the number of bytes actually copied to the buffer. The code incorrectly uses 'count' as the index for null...

CVE-2025-71198

In the Linux kernel, the following vulnerability has been resolved: iio: imu: stlsm6dsx: fix iiochanspec for sensors without event detection The stlsm6dsxaccchannels array of struct iiochanspec has a non-NULL eventspec field, indicating support for IIO events. However, event detection is not...

CVE-2025-71199

The CVE-2025-71199 issue affects the Linux kernel IIO ADC driver for sama5d2 (at91-sama5d2_adc). A use-after-free can occur when at91_adc_interrupt schedules work (via the workqueue) and at91_adc_remove frees the indio_dev later through iio_device_unregister, allowing a worker to access freed mem...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002298)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002298 advisory. An issue was discovered in drivers/iio/dac/ad5755.c in the Linux kernel before 4.8.6. There is an out of bounds write in the function ad5755parsedt. Tenable has...