CVE-2024-57904
kernel: iio: adc: at91: call input_free_device() on allocated iio_dev
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · January 19, 2025
Updated · November 25, 2025
Description
In the Linux kernel, the following vulnerability has been resolved:
iio: adc: at91: call input_free_device() on allocated iio_dev
Current implementation of at91_ts_register() calls input_free_deivce() on st->ts_input, however, the err label can be reached before the allocated iio_dev is stored to st->ts_input. Thus call input_free_device() on input instead of st->ts_input.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified