CVE-2026-63930

A flaw was found in the Linux kernel's Industrial I/O (IIO) hardware consumer buffer component. This use-after-free vulnerability occurs in the err_put_buffers cleanup path of iio_hw_consumer_alloc(). During buffer cleanup, the code incorrectly uses list_for_each_entry() to iterate through buffers while simultaneously freeing them, which can lead to accessing memory that has already been released. This memory corruption could result in a denial of service or potentially lead to arbitrary code execution.