CVE-2026-63930

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the err put buffers cleanup path of the iio hw consumer alloc() function. The implementation used list for each entry() to iterate through buffers while calling iio buffer put(). Because iio buffer put() can free the current buffer when the reference count reaches zero, the loop macro subsequently attempts to access the freed buffer to evaluate buf->head.next for the next iteration.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.