What’s Vulnerable › Vulnerabilities

CVE-2022-48928: iio: adc: men_z188_adc: Fix a resource leak in an error handling path

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-08-22 · updated 2026-06-17
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: iio: adc: men_z188_adc: Fix a resource leak in an error handling path If iio_device_register() fails, a previous ioremap() is left unbalanced. Update the error handling path and add the missing iounmap() call, as already done in the remove function.

Affected products

• Linux kernel: from 3.15 before 4.9.304; from 4.10 before 4.14.269; from 4.15 before 4.19.232; from 4.20 before 5.4.182; from 5.5 before 5.10.103; from 5.11 before 5.15.26 — fixed in 4.14.269, 4.19.232, 4.9.304, 5.10.103, 5.15.26, 5.16.12

How to fix

Upgrade to a fixed version: Linux kernel 4.14.269, 4.19.232, 4.9.304, 5.10.103. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0f88722313645a903f4d420ba61ddc690ec2481d
• https://git.kernel.org/stable/c/1aa12ecfdcbafebc218910ec47acf6262e600cf5
• https://git.kernel.org/stable/c/53d43a9c8dd224e66559fe86af1e473802c7130e
• https://git.kernel.org/stable/c/c5723b422f564af15f2e3bc0592fd6376a0a6c45
• https://git.kernel.org/stable/c/ce1076b33e299dc8d270e4450a420a18bfb3e190
• https://git.kernel.org/stable/c/d6ed5426a7fad36cf928c244483ba24e72359638
• https://git.kernel.org/stable/c/e0a2e37f303828d030a83f33ffe14b36cb88d563
• https://git.kernel.org/stable/c/fe73477802981bd0d0d70f2b22f109bcca801bdb

Get alerted when CVE-2022-48928 or the next vulnerability affects your stack