CVE 7.8 HIGH

iio: accel: adxl380: Avoid reading more entries than present in FIFO_CVE-2026-43307

7.8 / 10
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: accel: adxl380: Avoid reading more entries than present in FIFO

The interrupt handler reads FIFO entries in batches of N samples, where N
is the number of scan elements that have been enabled. However, the sensor
fills the FIFO one sample at a time, even when more than one channel is
enabled. Therefore,the number of entries reported by the FIFO status
registers may not be a multiple of N; if this number is not a multiple, the
number of entries read from the FIFO may exceed the number of entries
actually present.

To fix the above issue, round down the number of FIFO entries read from the
status registers so that it is always a multiple of N.

Basic Information

ID CVE-2026-43307
Source Linux
Published May 8, 2026 at 13:11
Modified May 11, 2026 at 06:33

Affected Product

Vendor Linux
Product Linux
Version df36de13677a0ebd3ab31dd2c603f9eafdf8de7d
Affected Versions Linux Linux df36de13677a0ebd3ab31dd2c603f9eafdf8de7d
Linux Linux df36de13677a0ebd3ab31dd2c603f9eafdf8de7d
Linux Linux df36de13677a0ebd3ab31dd2c603f9eafdf8de7d
Linux Linux df36de13677a0ebd3ab31dd2c603f9eafdf8de7d
Linux Linux 6.12

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.