CVE-2026-64492: iio: temperature: tmp006: use devm_iio_trigger_register

Published Jul 25, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

iio: temperature: tmp006: use devmiiotriggerregister

tmp006probe() allocates the DRDY trigger with devmiiotriggeralloc() but registers it with plain iiotriggerregister(). The driver has no .remove() callback, so on module unload the trigger stays in the global trigger list while its memory is freed by devm, leaving a dangling entry.

Switch to devmiiotriggerregister() so the registration is undone in the same devm scope as the allocation.

Affected Software

1 affected component

Linux Linux kernel

Event History

Jul 25, 2026

CVE Published

via MITRE·08:51 AM

Data Sourced

via MITRE·08:51 AM

Description

Data Sourced

via NVD·10:17 AM

Description

Frequently Asked Questions

What is the severity of CVE-2026-64492?

CVE-2026-64492 has a risk rating of 28.

How do I fix CVE-2026-64492?

To fix CVE-2026-64492, update the Linux kernel to a version where the vulnerability is patched.

What impact does CVE-2026-64492 have on the Linux kernel?

CVE-2026-64492 can lead to potential resource leaks due to improper trigger registration.

Is CVE-2026-64492 exploitable?

CVE-2026-64492 is not directly exploitable since it requires specific conditions related to the driver.

Which driver is affected by CVE-2026-64492?

CVE-2026-64492 affects the iio temperature driver for the tmp006 sensor in the Linux kernel.