CVE-2026-98671: iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure
iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.113-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 7.2.10-1 - Upgrade
Upgrade
debian/linux-6.12to a version that resolves this vulnerability.Fixed in 6.12.113-1~deb12u1 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 5.10.273 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 5.15.224 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.1.191 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.6.160 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.12.113 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.18.56 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 7.2.10 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Operational
When devm_thermal_of_zone_register() fails, jump to err_map to unregister the IIO map array and disable runtime PM before probe returns.
Event History
Frequently Asked Questions
Under what condition is this issue triggered?
It is triggered when devm_thermal_of_zone_register() fails during probing of the sun4i GPADC IIO driver.
What resources are left uncleared when the failure occurs?
The failed probe path can return without unregistering the IIO map array and without disabling runtime power management.
What is the immediate mitigation if an update cannot be applied?
The provided data does not identify a configuration workaround. The issue is addressed by changing the thermal-zone-registration failure path to jump to err_map so the IIO map and runtime PM cleanup runs.