CVE-2026-98656 iio: trigger: cancel reenable_work before freeing trigger

In the Linux kernel, the following vulnerability has been resolved: iio: trigger: cancel reenablework before freeing trigger iiotriggernotifydoneatomic defers -reenable into trig-reenablework on the system workqueue, and the worker dereferences the owning trigger through containerof. Nothing...

EUVD-2026-103910

In the Linux kernel, the following vulnerability has been resolved: iio: trigger: cancel reenablework before freeing trigger iiotriggernotifydoneatomic defers -reenable into trig-reenablework on the system workqueue, and the worker dereferences the owning trigger through containerof. Nothing...

CVE-2026-98656

A vulnerability exists in the Linux kernel 's iio: trigger subsystem. The function iio_trigger_notify_done_atomic() defers reenable() into trig->reenable_work on the system workqueue, where a worker dereferences the owning trigger using container_of(). Because this work is not cancelled before...