CVE-2026-45883: iio: sca3000: Fix a resource leak in sca3000_probe()
In the Linux kernel, the following vulnerability has been resolved:
iio: sca3000: Fix a resource leak in sca3000probe()
spi->irq from requestthreadedirq() not released when iiodeviceregister() fails. Add an return value check and jump to a common error handler when iiodeviceregister() fails.
Affected Software
Event History
Frequently Asked Questions
What conditions are required to trigger the resource leak?
The SCA3000 driver must be probed successfully through request_threaded_irq(), and iio_device_register() must then fail. The issue is local and requires low privileges according to the CVSS vector.
What is the impact if the issue is triggered?
The IRQ obtained through request_threaded_irq() is not released, causing a resource leak. The reported CVSS impact is limited to availability, with no confidentiality or integrity impact.
How can I determine whether a system may be affected?
A system may be affected if it uses the Linux kernel SCA3000 IIO driver and encounters an iio_device_register() failure during driver probing. The provided data does not identify affected kernel versions.
What does the fix change?
The fix checks the return value from iio_device_register() and routes failures to a common error handler that releases the IRQ resource.