Description
In the Linux kernel, the following vulnerability has been resolved:
iio: adc: at91: call input_free_device() on allocated iio_dev
Current implementation of at91_ts_register() calls input_free_deivce() on st->ts_input, however, the err label can be reached before the allocated iio_dev is stored to st->ts_input. Thus call input_free_device() on input instead of st->ts_input.
Metrics
CVSS 3.1 7.8/10
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HAffected software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 84882b060301c35ab7e2c1ef355b0bd06b764195, < b549c90bfe66f704878aa1e57b30ba15dab71935; >= 84882b060301c35ab7e2c1ef355b0bd06b764195, < ac8d932e3214c10ec641ad45a253929a596ead62; >= 84882b060301c35ab7e2c1ef355b0bd06b764195, < 028a1ba8e3bae593d701aee4f690ce7c195b67d6; >= 84882b060301c35ab7e2c1ef355b0bd06b764195, < 25ef52f1c15db67d890b80203a911b9a57b0bf71; >= 84882b060301c35ab7e2c1ef355b0bd06b764195, < 09e067e3c83e0695d338e8a26916e3c2bc44be02; >= 84882b060301c35ab7e2c1ef355b0bd06b764195, < d115b7f3ddc03b38bb7e8754601556fe9b4fc034; >= 84882b060301c35ab7e2c1ef355b0bd06b764195, < de6a73bad1743e9e81ea5a24c178c67429ff510b |
| Linux | Linux | 3.16 |
References
- https://git.kernel.org/stable/c/028a1ba8e3bae593d701aee4f690ce7c195b67d6Patch
- https://git.kernel.org/stable/c/09e067e3c83e0695d338e8a26916e3c2bc44be02Patch
- https://git.kernel.org/stable/c/25ef52f1c15db67d890b80203a911b9a57b0bf71Patch
- https://git.kernel.org/stable/c/ac8d932e3214c10ec641ad45a253929a596ead62Patch
- https://git.kernel.org/stable/c/b549c90bfe66f704878aa1e57b30ba15dab71935Patch
- https://git.kernel.org/stable/c/d115b7f3ddc03b38bb7e8754601556fe9b4fc034Patch
- https://git.kernel.org/stable/c/de6a73bad1743e9e81ea5a24c178c67429ff510bPatch
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
Timeline
- Published
- Jan 19, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Modified