https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 02 Nov 2026 02:44:03 +0000 https://db.gcve.eu/vuln/cve-2026-98656 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>iio: trigger: cancel reenable_work before freeing trigger</p> <p>iio_trigger_notify_done_atomic() defers -&gt;reenable() into trig-&gt;reenable_work on the system workqueue, and the worker dereferences the owning trigger through container_of(). Nothing cancels this work before iio_trig_release() frees the trigger, so a worker armed by the last in-flight IRQ can outlive the free and touch freed memory.</p> <p>Cancel it at the top of iio_trig_release(), which every free path reaches through the device core&#39;s final put_device().</p> <p>Found by an in-house static analysis tool.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>iio: trigger: cancel reenable_work before freeing trigger</p> <p>iio_trigger_notify_done_atomic() defers -&gt;reenable() into trig-&gt;reenable_work on the system workqueue, and the worker dereferences the owning trigger through container_of(). Nothing cancels this work before iio_trig_release() frees the trigger, so a worker armed by the last in-flight IRQ can outlive the free and touch freed memory.</p> <p>Cancel it at the top of iio_trig_release(), which every free path reaches through the device core&#39;s final put_device().</p> <p>Found by an in-house static analysis tool.</p> https://db.gcve.eu/vuln/cve-2026-98656