SB20261022252 - Unchecked Return Value in Linux kernel iio light driver

Description

This security bulletin contains information about 1 vulnerability.

1) Unchecked Return Value (CVE-ID: CVE-2026-98661)

CWE-ID: CWE-252 - Unchecked Return Value

CVSSv4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service in buffered sensor acquisition.

The vulnerability exists due to an unchecked error return value in the Linux kernel ROHM BU27034 light sensor driver's bu27034_buffer_thread() function when reading the sensor integration time fails. A local user can initiate buffered sensor acquisition that encounters this error to cause the error code to be used in calculating the sleep duration, potentially leaving the acquisition thread delayed indefinitely.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/050482f958521d80603e88d5c3a59872528ec13c
• https://git.kernel.org/stable/c/10a958e76c737c19576e1097c49f210eb99b94bf
• https://git.kernel.org/stable/c/6a27402a8ff1f63464557c5274a4115b60ea1f2f
• https://git.kernel.org/stable/c/8065a6c02f629187131f3136bedb26f9080e3cca