Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection The st_lsm6dsx_acc_channels array of struct iio_chan_spec has a non-NULL event_spec field, indicating support for IIO events. However, event detection is not supported for all sensors, and if userspace tries to configure accelerometer wakeup events on a sensor device that does not support them (e.g. LSM6DS0), st_lsm6dsx_write_event() dereferences a NULL pointer when trying to write to the wakeup register. Define an additional struct iio_chan_spec array whose members have a NULL event_spec field, and use this array instead of st_lsm6dsx_acc_channels for sensors without event detection capability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected b5969abfa8b8ed43ebd93479d394f664bd4a5a87 before 7673167fac9323110973a3300637adba7d45de3a; affected b5969abfa8b8ed43ebd93479d394f664bd4a5a87 before 4d60ffcdedfe2cdb68a1cde19bb292bc67451629; affected b5969abfa8b8ed43ebd93479d394f664bd4a5a87 before 81ed6e42d6e555dd978c9dd5e3f7c20cb121221b; affected b5969abfa8b8ed43ebd93479d394f664bd4a5a87 before c34e2e2d67b3bb8d5a6d09b0d6dac845cdd13fb3 |
| Linux / Linux | affected 5.5; unaffected 0 before 5.5; unaffected 6.6.122 through 6.6.*; unaffected 6.12.68 through 6.12.*; unaffected 6.18.8 through 6.18.*; unaffected 6.19 through * |
CWE
No CWE identifiers supplied.