Description
In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection The st_lsm6dsx_acc_channels array of struct iio_chan_spec has a non-NULL event_spec field, indicating support for IIO events. However, event detection is not supported for all sensors, and if userspace tries to configure accelerometer wakeup events on a sensor device that does not support them (e.g. LSM6DS0), st_lsm6dsx_write_event() dereferences a NULL pointer when trying to write to the wakeup register. Define an additional struct iio_chan_spec array whose members have a NULL event_spec field, and use this array instead of st_lsm6dsx_acc_channels for sensors without event detection capability.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
b5969abfa8b8ed43ebd93479d394f664bd4a5a87 to < 33c683417232b9111e29458954529942137780a3affectedb5969abfa8b8ed43ebd93479d394f664bd4a5a87 to < 7673167fac9323110973a3300637adba7d45de3aaffectedb5969abfa8b8ed43ebd93479d394f664bd4a5a87 to < 4d60ffcdedfe2cdb68a1cde19bb292bc67451629affectedb5969abfa8b8ed43ebd93479d394f664bd4a5a87 to < 81ed6e42d6e555dd978c9dd5e3f7c20cb121221baffectedb5969abfa8b8ed43ebd93479d394f664bd4a5a87 to < c34e2e2d67b3bb8d5a6d09b0d6dac845cdd13fb3affected
Linux Linux
Default version status: affected
5.5affected0 to < 5.5unaffected6.1.191 to ≤ 6.1.*unaffected6.6.122 to ≤ 6.6.*unaffected6.12.68 to ≤ 6.12.*unaffected6.18.8 to ≤ 6.18.*unaffected6.19 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/33c683417232b9111e29458954529942137780a3 ↗
- https://git.kernel.org/stable/c/7673167fac9323110973a3300637adba7d45de3a ↗
- https://git.kernel.org/stable/c/4d60ffcdedfe2cdb68a1cde19bb292bc67451629 ↗
- https://git.kernel.org/stable/c/81ed6e42d6e555dd978c9dd5e3f7c20cb121221b ↗
- https://git.kernel.org/stable/c/c34e2e2d67b3bb8d5a6d09b0d6dac845cdd13fb3 ↗