CVE-2026-31749
kernel: comedi: ni_atmio16d: Fix invalid clean-up after failed attach
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 1, 2026
Updated · June 28, 2026
Description
A flaw was found in the ni_atmio16d driver within the Comedi (Comedi is a collection of drivers for data acquisition equipment) subsystem of the Linux kernel. This vulnerability occurs when an error during the driver's attach process causes the cleanup function (atmio16d_detach()) to be called with uninitialized device data. This can lead to undesired writes to low I/O port addresses or null pointer dereferences, potentially resulting in system instability or a denial of service (DoS) for a local user.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-824 · Access of Uninitialized Pointer