CVE-2024-57904

iio: adc: at91: call input_free_device() on allocated iio_dev

published January 19, 2025

CVSS
—
EPSS
0%
Percentile
13.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: at91: call input_free_device() on allocated iio_dev

Current implementation of at91_ts_register() calls input_free_deivce()

on st->ts_input, however, the err label can be reached before the

allocated iio_dev is stored to st->ts_input. Thus call

input_free_device() on input instead of st->ts_input.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00235 · 13.6th percentile
Published
2025-01-19T11:52Z
EPSS history
Timeline
  • 19 JAN 11:52Z
    iio: adc: at91: call input_free_device() on allocated iio_dev
    cvelistv5