iio: imu: adis16400: fix unprotected debugfs reads (Linux Linux)

CVE-2026-98664
Non disponible

En bref

Source
NVD
EPSS
EPSS 0.21 % · centile 11 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
Linux
Statut NVD
Received

Description

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16400: fix unprotected debugfs reads adis16400_serial_number_fops is open coded and never calls debugfs_file_get(), so debugfs_remove_recursive() does not wait for a read in progress and unbind frees the iio_dev underneath it. Commit ae1d37a9bb4b ("iio: imu: adis16400: use DEFINE_DEBUGFS_ATTRIBUTE instead of DEFINE_SIMPLE_ATTRIBUTE") converted product_id and flash_count to DEFINE_DEBUGFS_ATTRIBUTE, which protects itself, but moved all three files to debugfs_create_file_unsafe(). serial_number prints three registers as "%.4x-%.4x-%.4x" and DEFINE_DEBUGFS_ATTRIBUTE() formats a single u64, so it cannot be converted without changing what the file returns. adis16475 and adis16550 already use debugfs_create_file() for their open coded files. Use it here too.

Références

Références européennes

Avis du CERT-FR

Produits affectés

ProduitVersions
Linux · Linuxaffected ae1d37a9bb4bd8d9091a40d153143e99b115ee37 < 48bb3c9b4a2fac64cb17c357418ebfbd4c9ac8ff ; affected ae1d37a9bb4bd8d9091a40d153143e99b115ee37 < 69cc001761894c65a0eef1bb6df911b39d30d71e ; affected ae1d37a9bb4bd8d9091a40d153143e99b115ee37 < d32eb2161b452a25b03f915f431bdcb9722cd92c ; affected ae1d37a9bb4bd8d9091a40d153143e99b115ee37 < d3078aaef8af4648f94eeafde4b7b36efd9838d1 ; affected ae1d37a9bb4bd8d9091a40d153143e99b115ee37 < e9b4c00f775a915b759b08bfe2c5e806a8301a59 ; affected ae1d37a9bb4bd8d9091a40d153143e99b115ee37 < 50e8d70ba0743f88afd7e49f9cebd1841ee677f5
Linux · Linuxaffected 5.8 ; unaffected 0 < 5.8 ; unaffected 5.10.273 ≤ 5.10.* ; unaffected 5.15.224 ≤ 5.15.* ; unaffected 6.1.191 ≤ 6.1.* ; unaffected 6.6.160 ≤ 6.6.*

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD