CVE-2026-64498: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: free scan_mask on buffer release The scan_mask lifetime changed in commit 9a2e1233d38c ("iio: buffer: hw-consumer: remove redundant scan_mask flexible array"). Before that change, the scan mask storage was embedded in struct hw_consumer_buffer, so iio_hw_buf_release() could free the whole allocation with a single kfree(hw_buf). That commit moved the scan mask to a separate bitmap_zalloc() allocation stored in buffer.scan_mask, but left iio_hw_buf_release() unchanged. Free the scan mask in iio_hw_buf_release() before freeing the buffer wrapper.

Засегнати продукти

• Linux Linux: 9a2e1233d38c460ad07f36901931f3674a32d1ed преди fb8e18f8ca724bd4de4643cad5b7c7230b9a5a71; 9a2e1233d38c460ad07f36901931f3674a32d1ed преди 6325d6e2204327965b849c0a16efb6ac9202e5a8
• Linux Linux: 7.1; преди 7.1; 7.1.4 до 7.1.*; от 7.2 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-64498
• https://nvd.nist.gov/vuln/detail/CVE-2026-64498
• https://git.kernel.org/stable/c/fb8e18f8ca724bd4de4643cad5b7c7230b9a5a71
• https://git.kernel.org/stable/c/6325d6e2204327965b849c0a16efb6ac9202e5a8