CVE-2026-63930

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-63930
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63930.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-63930
Downstream
Published
2026-07-19T14:55:30.016Z
Modified
2026-07-21T03:47:39.195807214Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
iio: buffer: hw-consumer: fix use-after-free in error path
Details

In the Linux kernel, the following vulnerability has been resolved:

iio: buffer: hw-consumer: fix use-after-free in error path

In the errputbuffers cleanup path of iiohwconsumeralloc(), the code was using listforeachentry() to iterate through buffers while calling iiobufferput() which can free the current buffer if refcount drops to 0. The listforeach_entry() loop macro then evaluates buf->head.next to continue iteration, accessing the freed buffer.

Fix this by using listforeachentrysafe().

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63930.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
48b66f8f936f369bb1a43c12aedbfeb2975baf4c
Fixed
b71893c57730809c222766e5718bb33610f11963
Fixed
2ff615fc455acda5425c4900160cbe11cfea4449
Fixed
d2759d49860b9a39b5cde2fb88e4b822ddf5f58f
Fixed
29783e6b6ec0b7152a15e53a063f17537e81177d
Fixed
e965627f0d442bfcae3f496c90cb653fb0917a61
Fixed
a3763ae33476328cf8d661742deb9daec78eac96
Fixed
9319c94f63ed10723afd738d79f5617daba87cc8
Fixed
6f5ed4f2c7c83f33344e0ba179f72a12e5dad4a4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63930.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.16.0
Fixed
5.10.259
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.210
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.176
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.143
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.93
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.35
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.0.12

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63930.json"