https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 21:54:00 +0000 https://vulnerability.circl.lu/vuln/cve-2026-64498 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>iio: buffer: hw-consumer: free scan_mask on buffer release</p> <p>The scan_mask lifetime changed in commit 9a2e1233d38c (&#34;iio: buffer: hw-consumer: remove redundant scan_mask flexible array&#34;).</p> <p>Before that change, the scan mask storage was embedded in struct hw_consumer_buffer, so iio_hw_buf_release() could free the whole allocation with a single kfree(hw_buf).</p> <p>That commit moved the scan mask to a separate bitmap_zalloc() allocation stored in buffer.scan_mask, but left iio_hw_buf_release() unchanged.</p> <p>Free the scan mask in iio_hw_buf_release() before freeing the buffer wrapper.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>iio: buffer: hw-consumer: free scan_mask on buffer release</p> <p>The scan_mask lifetime changed in commit 9a2e1233d38c (&#34;iio: buffer: hw-consumer: remove redundant scan_mask flexible array&#34;).</p> <p>Before that change, the scan mask storage was embedded in struct hw_consumer_buffer, so iio_hw_buf_release() could free the whole allocation with a single kfree(hw_buf).</p> <p>That commit moved the scan mask to a separate bitmap_zalloc() allocation stored in buffer.scan_mask, but left iio_hw_buf_release() unchanged.</p> <p>Free the scan mask in iio_hw_buf_release() before freeing the buffer wrapper.</p> https://vulnerability.circl.lu/vuln/cve-2026-64498