CVE-2026-45883: iio: sca3000: Fix a resource leak in sca3000_probe()

Q: What conditions are required to trigger the resource leak?

The SCA3000 driver must be probed successfully through request_threaded_irq(), and iio_device_register() must then fail. The issue is local and requires low privileges according to the CVSS vector.

Q: What is the impact if the issue is triggered?

The IRQ obtained through request_threaded_irq() is not released, causing a resource leak. The reported CVSS impact is limited to availability, with no confidentiality or integrity impact.

Q: How can I determine whether a system may be affected?

A system may be affected if it uses the Linux kernel SCA3000 IIO driver and encounters an iio_device_register() failure during driver probing. The provided data does not identify affected kernel versions.

Q: What does the fix change?

The fix checks the return value from iio_device_register() and routes failures to a common error handler that releases the IRQ resource.

Published May 27, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

iio: sca3000: Fix a resource leak in sca3000probe()

spi->irq from requestthreadedirq() not released when iiodeviceregister() fails. Add an return value check and jump to a common error handler when iiodeviceregister() fails.

Affected Software

8 affected components

Linux Linux kernel (iio sca3000)

Linux Linux kernel>=4.10<5.10.252

Linux Linux kernel>=5.11<5.15.202

Linux Linux kernel>=5.16<6.1.165

Linux Linux kernel>=6.2<6.6.128

Linux Linux kernel>=6.7<6.12.75

Linux Linux kernel>=6.13<6.18.14

Linux Linux kernel>=6.19<6.19.4

Event History

May 27, 2026

CVE Published

via MITRE·12:16 PM

Data Sourced

via MITRE·12:16 PM

Description

Data Sourced

via NVD·02:17 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What conditions are required to trigger the resource leak?

The SCA3000 driver must be probed successfully through request_threaded_irq(), and iio_device_register() must then fail. The issue is local and requires low privileges according to the CVSS vector.

What is the impact if the issue is triggered?

The IRQ obtained through request_threaded_irq() is not released, causing a resource leak. The reported CVSS impact is limited to availability, with no confidentiality or integrity impact.

How can I determine whether a system may be affected?

A system may be affected if it uses the Linux kernel SCA3000 IIO driver and encounters an iio_device_register() failure during driver probing. The provided data does not identify affected kernel versions.

What does the fix change?

The fix checks the return value from iio_device_register() and routes failures to a common error handler that releases the IRQ resource.

CVE-2026-45883: iio: sca3000: Fix a resource leak in sca3000_probe()

Affected Software

Event History

Frequently Asked Questions

What conditions are required to trigger the resource leak?

What is the impact if the issue is triggered?

How can I determine whether a system may be affected?

What does the fix change?

Company

Resources

Contact

Frequently Asked Questions

What conditions are required to trigger the resource leak?

What is the impact if the issue is triggered?

How can I determine whether a system may be affected?

What does the fix change?