In the Linux kernel, the following vulnerability has been resolved: iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure If… (CVE-2026-98671)

The vulnerability in the Linux kernel's sun4i-gpadc-iio driver occurs when devm_thermal_of_zone_register() fails during probe. The probe function returns without unregistering the IIO map array or disabling runtime power management, resulting in resource leaks. The fix ensures that on failure, the code jumps to the error handling path (err_map) to properly release these resources.

If the thermal zone registration fails, the driver does not clean up allocated resources, potentially leading to resource leaks and unstable device behavior. There is no indication of direct security impact such as privilege escalation or code execution from the provided data.

A fix has been implemented in the Linux kernel to ensure proper cleanup on thermal zone registration failure. Users should update to the fixed kernel version once available. No additional mitigation steps are indicated.