UBUNTU-CVE-2026-98657: Low severity ubuntu/linux-azure vulnerability
In the Linux kernel, the following vulnerability has been resolved: iio: proximity: pulsedlight: fix iiodevice left registered on PM setup failure pmruntimesetactive() failing in probe() jumps to errorunregbuffer, which only calls iiotriggeredbuffercleanup() -- it does not undo the iiodeviceregister() that already succeeded a few lines above. probe() then returns the error, the devm-managed indiodev is freed, but the iio core still has it registered: the sysfs/chardev nodes stay live and point at freed memory. Add an errorunregdev label that unregisters the iio device before falling through to the existing buffer cleanup, mirroring the teardown order already used in lidarremove().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In the pulsedlight driver's probe() error path, add an error_unreg_dev label that calls iio_device_unregister() before falling through to the existing iio_triggered_buffer_cleanup(), matching the teardown order used in lidar_remove().