CVE-2026-64492

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the tmp006 probe() function, the DRDY trigger is allocated using devm iio trigger alloc() but registered using iio trigger register(). Because the driver lacks a .remove() callback, the trigger remains in the global trigger list during module unload even after its memory is freed by the device-managed resource (devm) framework, resulting in a dangling entry.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.