The Linux kernel's iio sca3000 driver had a resource leak in the sca3000_probe() function. Specifically, the interrupt request line (spi->irq) obtained via request_threaded_irq() was not released if iio_device_register() failed. The fix added a return value check for iio_device_register() and ensured that on failure, control jumps to a common error handler to release allocated resources properly. This vulnerability is tracked as CVE-2026-45883 and is categorized under CWE-401 (Improper Release of Memory or Resource).

This vulnerability can cause a resource leak leading to potential denial of service by exhausting kernel resources related to interrupt handling. There is no impact on confidentiality or integrity. The CVSS vector indicates local attack complexity and privileges required, with no user interaction needed, and the impact is limited to availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vulnerability description indicates that a fix has been implemented in the Linux kernel source code. Users should update to the fixed kernel version once available from their distribution or vendor.