CVE-2026-64498General

LOW

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: free scan_mask on buffer release The scan_mask lifetime changed in commit 9a2e1233d38c ("iio: buffer: hw-consumer: remove redundant scan_mask flexible array"). Before that change, the scan mask storage was embedded in struct hw_consumer_buffer, so iio_hw_buf_release() could free the whole allocation with a single kfree(hw_buf). That commit moved the scan mask to a separate bitmap_zalloc() allocation stored in buffer.scan_mask, but left iio_hw_buf_release() unchanged. Free the scan mask in iio_hw_buf_release() before freeing the buffer wrapper.

0.5/ 10 priority

Sources & remediation

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • General: 2 classified signals
  • 3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-07-25: 3Patch / Workaround · 2026-07-25: 1Technical Details · 2026-07-25: 107-25
Signal classification2 categories
General
266.7%
Patch
133.3%
Referenced assets3 URLs
Full discourse3 posts
  • CVE@CVEnew
    Patch

    CVE-2026-64498 In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: free scan_mask on buffer release The scan_mask lifetime changed in com… https://www.cve.org/CVERecord?id=CVE-2026-64498

    Post summary

    CVE-2026-64498 is a Linux kernel buffer handling issue that has been fixed, with no evidence of active exploitation or a published PoC.

    000201.1K
    58.1K followersView on X
  • Infoflowcloud@infoflowcloud
    General

    🚨*CVE* CVE-2026-64498 In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: free scan_mask on buffer release The scan_mask lifetime changed in com… https://www.cve.org/CVERecord?id=CVE-2026-64498 ----- Traducción: CVE-2026-64498 En … http://infoflow.cloud`

    Post summary

    The post simply notes that CVE‑2026‑64498 in the Linux kernel has been fixed, linking to the official CVE record, without providing PoC, exploit details, or technical depth.

    0000022
    95 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-64498 In the Linux kernel, the following vulnerability has been resolved: iio https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-64498

    Post summary

    The text only states that CVE-2026-64498, a Linux kernel iio vulnerability, has been resolved, without providing any technical, exploit, or patch details.

    00000105
    4.1K followersView on X

Explore more