https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 22:46:34 +0000 https://vulnerability.circl.lu/vuln/cve-2025-71199 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver</p> <p>at91_adc_interrupt can call at91_adc_touch_data_handler function to start the work by schedule_work(&amp;st-&gt;touch_st.workq).</p> <p>If we remove the module which will call at91_adc_remove to make cleanup, it will free indio_dev through iio_device_unregister but quite a bit later. While the work mentioned above will be used. The sequence of operations that may lead to a UAF bug is as follows:</p> <p>CPU0 CPU1</p> <p>| at91_adc_workq_handler at91_adc_remove | iio_device_unregister(indio_dev) | //free indio_dev a bit later | | iio_push_to_buffers(indio_dev) | //use indio_dev</p> <p>Fix it by ensuring that the work is canceled before proceeding with the cleanup in at91_adc_remove.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver</p> <p>at91_adc_interrupt can call at91_adc_touch_data_handler function to start the work by schedule_work(&amp;st-&gt;touch_st.workq).</p> <p>If we remove the module which will call at91_adc_remove to make cleanup, it will free indio_dev through iio_device_unregister but quite a bit later. While the work mentioned above will be used. The sequence of operations that may lead to a UAF bug is as follows:</p> <p>CPU0 CPU1</p> <p>| at91_adc_workq_handler at91_adc_remove | iio_device_unregister(indio_dev) | //free indio_dev a bit later | | iio_push_to_buffers(indio_dev) | //use indio_dev</p> <p>Fix it by ensuring that the work is canceled before proceeding with the cleanup in at91_adc_remove.</p> https://vulnerability.circl.lu/vuln/cve-2025-71199