CVE-2026-98669

iio: buffer: serialize buffer teardown with mode claims

State: Published
Severity: Not scored
Published: Oct 18, 2026
Updated: Oct 30, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: buffer: serialize buffer teardown with mode claims

Buffer-mode claims hold mlock to guarantee that the device remains in buffer mode until the claim is released. Normal buffer updates take info_exist_lock followed by mlock in iio_update_buffers().

However, iio_device_unregister() disables and deactivates all buffers without taking mlock. This can invalidate buffer state, including active_scan_mask, while a buffer-mode claim is held.

Take mlock in iio_disable_all_buffers() so that unregister honors the mode-claim lifetime guarantee. The info_exist_lock -> mlock ordering matches iio_update_buffers().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a9c471892d75847671a246619c2148578f22bbc6 to before 261f54966ebf45ced5fe5e1fe5119c6c44e140abAffected 7bca0af538a49dacb1470f233be0676bdc09605b to before cebbecb26d22368440c4779f8275d790cf347177Affected 0a8565425afd8ba0e1a0ea73e21da119ee6dacea to before 6a728408ff522b749c2a3c7e68f44e861fa0dbfbAffected 0a8565425afd8ba0e1a0ea73e21da119ee6dacea to before 89f3852a28fcf7bab599280cb082baa0675536dbAffected 0a8565425afd8ba0e1a0ea73e21da119ee6dacea to before b466db9e68b4741af85f6c017e2bb0a2f025053fAffected 0a8565425afd8ba0e1a0ea73e21da119ee6dacea to before e63188d77e10c0951bf67da6c295f768fd1abf4bAffected 0a8565425afd8ba0e1a0ea73e21da119ee6dacea to before 84bb0fc46ccf6a545b8fdf57cda83770186ed8ddAffected 5.15.137 to before 5.15.224Affected 6.1.60 to before 6.1.191Affected
LinuxLinux	6.2Affected before 6.2Not affected 5.15.224 through 5.15.Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.113 through 6.12.Not affected 6.18.56 through 6.18.Not affected 7.2.10 through 7.2.Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

a9c471892d75847671a246619c2148578f22bbc6 to before 261f54966ebf45ced5fe5e1fe5119c6c44e140abAffected
7bca0af538a49dacb1470f233be0676bdc09605b to before cebbecb26d22368440c4779f8275d790cf347177Affected
0a8565425afd8ba0e1a0ea73e21da119ee6dacea to before 6a728408ff522b749c2a3c7e68f44e861fa0dbfbAffected
0a8565425afd8ba0e1a0ea73e21da119ee6dacea to before 89f3852a28fcf7bab599280cb082baa0675536dbAffected
0a8565425afd8ba0e1a0ea73e21da119ee6dacea to before b466db9e68b4741af85f6c017e2bb0a2f025053fAffected
0a8565425afd8ba0e1a0ea73e21da119ee6dacea to before e63188d77e10c0951bf67da6c295f768fd1abf4bAffected
0a8565425afd8ba0e1a0ea73e21da119ee6dacea to before 84bb0fc46ccf6a545b8fdf57cda83770186ed8ddAffected
5.15.137 to before 5.15.224Affected
6.1.60 to before 6.1.191Affected

LinuxLinux

6.2Affected
before 6.2Not affected
5.15.224 through 5.15.*Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.113 through 6.12.*Not affected
6.18.56 through 6.18.*Not affected
7.2.10 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.