Description
In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6030: fix IIO device retrieval from embedded device The dev pointer that is received as an argument in the in_illuminance_period_available_show function references the device embedded in the IIO device, not in the i2c client. dev_to_iio_dev() must be used to accessthe right data. The current implementation leads to a segmentation fault on every attempt to read the attribute because indio_dev gets a NULL assignment. This bug has been present since the first appearance of the driver, apparently since the last version (V6) before getting applied. A constant attribute was used until then, and the last modifications might have not been tested again.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
7b779f573c48e1ad6da1d6ea5f181f3ecd666bf6 to < bf3ab8e1c28f10df0823d4ff312f83c952b06a15affected7b779f573c48e1ad6da1d6ea5f181f3ecd666bf6 to < 50039aec43a82ad2495f2d0fb0c289c8717b4bb2affected7b779f573c48e1ad6da1d6ea5f181f3ecd666bf6 to < bcb90518ccd9e10bf6ab29e31994aab93e4a4361affected7b779f573c48e1ad6da1d6ea5f181f3ecd666bf6 to < 2cbb41abae65626736b8b52cf3b9339612c5a86aaffected7b779f573c48e1ad6da1d6ea5f181f3ecd666bf6 to < 905166531831beb067fffe2bdfc98031ffe89087affected7b779f573c48e1ad6da1d6ea5f181f3ecd666bf6 to < c7c44e57750c31de43906d97813273fdffcf7d02affected
Linux Linux
Default version status: affected
5.5affected0 to < 5.5unaffected5.10.228 to ≤ 5.10.*unaffected5.15.169 to ≤ 5.15.*unaffected6.1.114 to ≤ 6.1.*unaffected6.6.58 to ≤ 6.6.*unaffected6.11.5 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/bf3ab8e1c28f10df0823d4ff312f83c952b06a15 ↗
- https://git.kernel.org/stable/c/50039aec43a82ad2495f2d0fb0c289c8717b4bb2 ↗
- https://git.kernel.org/stable/c/bcb90518ccd9e10bf6ab29e31994aab93e4a4361 ↗
- https://git.kernel.org/stable/c/2cbb41abae65626736b8b52cf3b9339612c5a86a ↗
- https://git.kernel.org/stable/c/905166531831beb067fffe2bdfc98031ffe89087 ↗
- https://git.kernel.org/stable/c/c7c44e57750c31de43906d97813273fdffcf7d02 ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗