CVE-2026-64492
- Source
- https://cve.org/CVERecord?id=CVE-2026-64492
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64492.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-64492
- Downstream
- Published
- 2026-07-25T08:51:50.313Z
- Modified
- 2026-07-27T04:02:41.303147502Z
- Summary
- iio: temperature: tmp006: use devm_iio_trigger_register
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
iio: temperature: tmp006: use devmiiotrigger_register
tmp006probe() allocates the DRDY trigger with devmiiotriggeralloc() but registers it with plain iiotriggerregister(). The driver has no .remove() callback, so on module unload the trigger stays in the global trigger list while its memory is freed by devm, leaving a dangling entry.
Switch to devmiiotrigger_register() so the registration is undone in the same devm scope as the allocation.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64492.json" }- References
-
- https://git.kernel.org/stable/c/3c5eed894efd93d68d7f6a359a81ddef0e928774
- https://git.kernel.org/stable/c/a4f8491da9563ba6eb77969ac26fc7052114c476
- https://git.kernel.org/stable/c/d90f868f56a16e10eedc6552f48d99dff4d275b7
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64492.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-64492
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git