In the Linux kernel, the following vulnerability has been resolved:
iio: fix memory leak in iio_device_register_eventset()
When iio_device_register_sysfs_group() returns failed, iio_device_register_eventset() needs to free attrs array.
Otherwise, kmemleak would scan & report memory leak as below:
unreferenced object 0xffff88810a1cc3c0 (size 32): comm "100-i2c-vcnl302", pid 728, jiffies 4295052307 (age 156.027s) backtrace: __kmalloc+0x46/0x1b0 iio_device_register_eventset at drivers/iio/industrialio-event.c:541 __iio_device_register at drivers/iio/industrialio-core.c:1959 __devm_iio_device_register at drivers/iio/industrialio-core.c:2040
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 24, 2025 | Oct 24, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 22, 2025 |
| Ubuntu | — | Upgrade linux-intel-iot-realtimeUpgrade linux-oracle-5.15Upgrade linux-azure-5.15Upgrade linux-lowlatencyUpgrade linuxUpgrade linux-gkeopUpgrade linux-ibmUpgrade linux-nvidia-tegra-5.15Upgrade linux-oracleUpgrade linux-kvmUpgrade linux-riscv-5.15Upgrade linux-bluefieldUpgrade linux-intel-iotgUpgrade linux-azureUpgrade linux-gcp-5.15Upgrade linux-gcpUpgrade linux-gkeUpgrade linux-nvidiaUpgrade linux-intel-iotg-5.15Upgrade linux-awsUpgrade linux-aws-5.15Upgrade linux-hwe-5.15Upgrade linux-raspiUpgrade linux-lowlatency-hwe-5.15Upgrade linux-realtime | Oct 28, 2025 | Oct 24, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub