Unrated severityNVD Advisory· Published Jul 25, 2026· Updated Aug 17, 2026
CVE-2026-64492
CVE-2026-64492
Description
In the Linux kernel, the following vulnerability has been resolved:
iio: temperature: tmp006: use devm_iio_trigger_register
tmp006_probe() allocates the DRDY trigger with devm_iio_trigger_alloc() but registers it with plain iio_trigger_register(). The driver has no .remove() callback, so on module unload the trigger stays in the global trigger list while its memory is freed by devm, leaving a dangling entry.
Switch to devm_iio_trigger_register() so the registration is undone in the same devm scope as the allocation.
Affected products
3- osv-coords2 versions
< 7.1.7-1.1+ 1 more
- (no CPE)range: < 7.1.7-1.1
- (no CPE)range: >= 6.13.0, < 6.18.39
Patches
Vulnerability mechanics
References
3News mentions
1- Linux Kernel: 25 Vulnerabilities Across Subsystems Disclosed and Patched TogetherVypr Intelligence · Jul 26, 2026