Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-72479

iio: accel: mma8452: handle I2C read error(s) in mma8452_read()

Description

In the Linux kernel, the following vulnerability has been resolved: iio: accel: mma8452: handle I2C read error(s) in mma8452_read() Currently, If i2c_smbus_read_i2c_block_data() fails but mma8452_set_runtime_pm_state() succeeds, mma8452_read() returns 0. As a result, the caller mma8452_read_raw() assumes the read was successful and proceeds to use a buffer containing uninitialized stack memory. Add proper checking of the I2C read return value and propagate errors to the caller.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 96c0cb2bbfe0a58bd0c37cf34d50a20f9cd75aa8 to < b488055e81d9faaaf2f8aaff45f9944040ac4493affected
  • 96c0cb2bbfe0a58bd0c37cf34d50a20f9cd75aa8 to < f9ec3f3e9cf27dd06cd3725eeaa44e3ce46be893affected
  • 96c0cb2bbfe0a58bd0c37cf34d50a20f9cd75aa8 to < b4932fc325e84a3233413daf230b043818c8a824affected
  • 96c0cb2bbfe0a58bd0c37cf34d50a20f9cd75aa8 to < eed69f8a10b82989ad732ace0fb43a9fb4e7fe35affected
  • 96c0cb2bbfe0a58bd0c37cf34d50a20f9cd75aa8 to < f3d905ea1e4996d933074481e80d96ecd74a9904affected
  • 96c0cb2bbfe0a58bd0c37cf34d50a20f9cd75aa8 to < 1cddef80a180af74c33d2f26c962ce92b60fded4affected
  • 96c0cb2bbfe0a58bd0c37cf34d50a20f9cd75aa8 to < f3d413e701c5e54bef736b638967724dda880365affected
  • 96c0cb2bbfe0a58bd0c37cf34d50a20f9cd75aa8 to < 5bdff291d20c31b365d9ddfe9c426fbfb41da5bbaffected

Linux Linux

Default version status: affected

  • 4.7affected
  • 0 to < 4.7unaffected
  • 5.10.261 to ≤ 5.10.*unaffected
  • 5.15.212 to ≤ 5.15.*unaffected
  • 6.1.178 to ≤ 6.1.*unaffected
  • 6.6.145 to ≤ 6.6.*unaffected
  • 6.12.97 to ≤ 6.12.*unaffected
  • 6.18.40 to ≤ 6.18.*unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References