CVE-2026-64498

A flaw was found in the Linux kernel's Industrial I/O (IIO) subsystem, specifically within the hardware consumer buffer (hw-consumer). Due to an oversight in memory management, a dedicated memory region (scan_mask) was not properly released when its associated buffer was freed. A local attacker with low privileges could exploit this memory leak, potentially leading to system instability or a denial of service (DoS) by exhausting available memory resources.