CVE-2026-45883

iio: sca3000: Fix a resource leak in sca3000_probe()

MEDIUM
5.5
CVSS Score
Published: May 27, 2026 at 12:16 PM UTC
Updated: June 27, 2026 at 11:41 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: iio: sca3000: Fix a resource leak in sca3000_probe() spi->irq from request_threaded_irq() not released when iio_device_register() fails. Add an return value check and jump to a common error handler when iio_device_register() fails.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.10 ≤ v < 5.10.2524.10 ≤ v < 5.15.2024.10 ≤ v < 6.1.1654.10 ≤ v < 6.12.754.10 ≤ v < 6.18.144.10 ≤ v < 6.19.44.10 ≤ v < 6.6.1284.10 ≤ v < 7.05.11 ≤ v < 5.15.2025.16 ≤ v < 6.1.1656.13 ≤ v < 6.18.146.19 ≤ v < 6.19.46.2 ≤ v < 6.6.1286.7 ≤ v < 6.12.754.109a4936dc89a34e002946a6c08b330918ec6afab8
Vendor states this is fixed in 103ac8e3a7f345a0966ef582b8a874ac31a92c7c (fixed)
Vendor states this is fixed in 40c860ece22542178cddcf01b08644bcdbc597b3 (fixed)
Vendor states this is fixed in 517d9f2b963089b3d64c23accf7920d77f5a30c8 (fixed)
Vendor states this is fixed in 55e13abf22c27a3b0ab5cf941dd07a2d9786736c (fixed)
Vendor states this is fixed in 597d749c5180f3e351837e851a6131b140324e9f (fixed)
Vendor states this is fixed in 62b44ebc1f2c71db3ca2d4737c52e433f6f03038 (fixed)
Vendor states this is fixed in 84d3c396d8ae73c24dececfcc4e544ea09311e32 (fixed)
Vendor states this is fixed in e8e960c3d23fdb4882d70d34ce762368da0f1427 (fixed)
Vendor states this is fixed in 4.10 (unaffected)
Vendor states this is fixed in 5.10.252 (unaffected)
Vendor states this is fixed in 5.15.202 (unaffected)
Vendor states this is fixed in 6.1.165 (unaffected)
Vendor states this is fixed in 6.12.75 (unaffected)
Vendor states this is fixed in 6.18.14 (unaffected)
Vendor states this is fixed in 6.19.4 (unaffected)
Vendor states this is fixed in 6.6.128 (unaffected)
Vendor states this is fixed in 7.0 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-401

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card