SB2026050934 - Improper Check or Handling of Exceptional Conditions in Linux kernel iio gyro driver



SB2026050934 - Improper Check or Handling of Exceptional Conditions in Linux kernel iio gyro driver

Published: May 9, 2026

Security Bulletin ID SB2026050934
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Improper Check or Handling of Exceptional Conditions (CVE-ID: CVE-2026-43357)

CWE-ID: CWE-703 - Improper Check or Handling of Exceptional Conditions

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper error handling in the mpu3050 gyroscope driver power management logic when resuming the device for preenable operations. A local user can trigger the vulnerable code path to cause a denial of service.

The issue occurs because the driver may access hardware that failed to resume, and the device usage count may be incremented even on failure.


Remediation

Install update from vendor's website.