Executive brief
A resource leak was identified in the Linux kernel's sca3000 accelerometer driver. This issue occurs when the system fails to properly release hardware interrupt resources during a failed device initialization. While primarily a stability concern, such leaks can eventually lead to system instability or resource exhaustion if triggered repeatedly.
Technical details
A resource leak exists in drivers/iio/accel/sca3000.c within the sca3000_probe() function. The driver requests a threaded IRQ using request_threaded_irq(), but if the subsequent call to iio_device_register() fails, the IRQ is not released before the function returns. This results in a leaked interrupt resource. The fix introduces a return value check for iio_device_register() and ensures the execution flow jumps to the error_free_irq label to properly clean up resources. This is a local vulnerability requiring the ability to trigger device probing, typically through hardware interaction or administrative actions.
Affected products
- Linux Linux kernel All versions prior to the 2026 fix (specifically affecting the sca3000 driver)
Timeline
- 2026-01-27: patched: Initial patch authored by Harshit Mogalapalli
- 2026-05-27: disclosed: CVE-2026-45883 published
References
- https://git.kernel.org/stable/c/103ac8e3a7f345a0966ef582b8a874ac31a92c7c
- https://git.kernel.org/stable/c/40c860ece22542178cddcf01b08644bcdbc597b3
- https://git.kernel.org/stable/c/517d9f2b963089b3d64c23accf7920d77f5a30c8
- https://git.kernel.org/stable/c/55e13abf22c27a3b0ab5cf941dd07a2d9786736c
- https://git.kernel.org/stable/c/597d749c5180f3e351837e851a6131b140324e9f
- https://git.kernel.org/stable/c/62b44ebc1f2c71db3ca2d4737c52e433f6f03038
- https://git.kernel.org/stable/c/84d3c396d8ae73c24dececfcc4e544ea09311e32