{"id":"CVE-2026-98671","kind":"vulnerability","aliases":["CVE-2026-98671"],"related":[],"title":"Linux kernel: sun4i ADC probe leaks resources after thermal registration failure","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure\n\nIf devm_thermal_of_zone_register() fails, probe returns without\nunregistering the IIO map array or disabling runtime PM.\n\nJump to err_map to release them.","summary":"In the Linux IIO driver for the Allwinner sun4i GPADC, a failed thermal zone registration makes probe return without unregistering the IIO map or disabling runtime PM. The fix jumps to the existing cleanup label so those resources are released.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["allwinner-sun4i","iio","infrastructure","linux-kernel"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-18T16:17:20+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","triaged_at":"2026-10-25T05:19:20+00:00","updated_at":"2026-10-25T05:19:20+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-10-25T05:19:20Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Linux kernel: sun4i ADC probe leaks resources after thermal registration failure","impact":"low","summary":"In the Linux IIO driver for the Allwinner sun4i GPADC, a failed thermal zone registration makes probe return without unregistering the IIO map or disabling runtime PM. The fix jumps to the existing cleanup label so those resources are released.","category":"infrastructure","nicknames":[],"who_cares":["linux-kernel","allwinner-sun4i","iio"],"confidence":0.4,"needs_auth":"unknown","worst_case":"unknown","analyst_note":"","how_to_check":"unknown","needs_analyst":false,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000486,"input_tokens":3333,"output_tokens":305,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-98671':14A,17A 'adc':4A,77C 'allwinn':19B,33B 'allwinner-sun4i':18B 'array':103C 'clean':82C 'cleanup':59B 'cve':12A,15A 'devm':90C 'disabl':50B,105C 'driver':30B 'err':110C 'exist':58B 'fail':37B,95C 'failur':11A,88C 'fix':54B 'follow':71C 'gpadc':35B,80C 'iio':21B,29B,47B,76C,81C,101C 'infrastructur':22B 'jump':55B,108C 'kernel':2A,25B,69C 'label':60B 'leak':6A 'linux':1A,24B,28B,68C 'linux-kernel':23B 'make':41B 'map':48B,102C,111C 'pm':52B,107C 'probe':5A,42B,96C 'regist':94C 'registr':10A,40B,87C 'releas':65B,113C 'resolv':75C 'resourc':7A,63B 'return':43B,97C 'runtim':51B,106C 'sun4i':3A,20B,34B,79C 'sun4i-gpadc-iio':78C 'thermal':9A,38B,85C,91C 'unregist':45B,99C 'vulner':72C 'without':44B,98C 'zone':39B,86C,93C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T16:17:20+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98671","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98671","severity":null,"published_at":"2026-10-18T16:17:20+00:00","modified_at":"2026-10-21T13:21:36+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}