CVE-2026-64492

CVE-2026-64492

published July 25, 2026

CVSS
—
EPSS
0%
Percentile
10.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

iio: temperature: tmp006: use devm_iio_trigger_register

tmp006_probe() allocates the DRDY trigger with devm_iio_trigger_alloc()

but registers it with plain iio_trigger_register(). The driver has no

.remove() callback, so on module unload the trigger stays in the global

trigger list while its memory is freed by devm, leaving a dangling

entry.

Switch to devm_iio_trigger_register() so the registration is undone in

the same devm scope as the allocation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00206 · 10.2th percentile
Published
2026-07-25T14:17Z
References (3)
EPSS history
Timeline
  • 25 JUL 08:51Z
    iio: temperature: tmp006: use devm_iio_trigger_register
    cvelistv5