CVE-2026-98663 iio: imu: adis16480: fix unprotected debugfs reads

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16480: fix unprotected debugfs reads The firmwarerevision and firmwaredate file operations are open coded and never call debugfsfileget, which debugfscreatefileunsafe requires. debugfsremoverecursive therefore does...

EUVD-2026-103917

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16480: fix unprotected debugfs reads The firmwarerevision and firmwaredate file operations are open coded and never call debugfsfileget, which debugfscreatefileunsafe requires. debugfsremoverecursive therefore does...

CVE-2026-98663

The Linux kernel contains a vulnerability in the iio: imu: adis16480 driver where the firmware_revision and firmware_date file operations are open coded and fail to call debugfs_file_get(). This missing call prevents debugfs_remove_recursive() from waiting for active reads, causing unbind to free...

CVE-2026-98663 iio: imu: adis16480: fix unprotected debugfs reads

In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16480: fix unprotected debugfs reads The firmwarerevision and firmwaredate file operations are open coded and never call debugfsfileget, which debugfscreatefileunsafe requires. debugfsremoverecursive therefore does...

EUVD-2026-103916

In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap020a00f: drain irqwork after freeirq The threaded IRQ handler queues data-work through irqworkqueue so the trigger is polled from a per-CPU context. freeirq does not flush an irqwork the handler already queued, s...

CVE-2026-98662 iio: light: gp2ap020a00f: drain irq_work after free_irq

In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap020a00f: drain irqwork after freeirq The threaded IRQ handler queues data-work through irqworkqueue so the trigger is polled from a per-CPU context. freeirq does not flush an irqwork the handler already queued, s...

CVE-2026-98662 iio: light: gp2ap020a00f: drain irq_work after free_irq

In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap020a00f: drain irqwork after freeirq The threaded IRQ handler queues data-work through irqworkqueue so the trigger is polled from a per-CPU context. freeirq does not flush an irqwork the handler already queued, s...

CVE-2026-98662

The Linux kernel contains a use-after-free vulnerability in the iio: light: gp2ap020a00f driver. The issue occurs because free_irq() does not flush irq_work that has already been queued by the threaded IRQ handler. Consequently, after gp2ap020a00f_remove() returns, the queued work may still execu...

CVE-2026-98661 iio: light: rohm-bu27034: Fix infinite delay on error

In the Linux kernel, the following vulnerability has been resolved: iio: light: rohm-bu27034: Fix infinite delay on error When reading an integration-time fails, the code will use error code to compute the sleep time. Fix this by using the smallest integration time as a default if reading fails...

CVE-2026-98661

The Linux kernel contains a vulnerability in the iio: light: rohm-bu27034 driver. When an integration-time read fails, the code incorrectly uses the resulting error code to compute the sleep time, potentially leading to an infinite delay . The issue is resolved by defaulting to the smallest integ...

CVE-2026-98661 iio: light: rohm-bu27034: Fix infinite delay on error

In the Linux kernel, the following vulnerability has been resolved: iio: light: rohm-bu27034: Fix infinite delay on error When reading an integration-time fails, the code will use error code to compute the sleep time. Fix this by using the smallest integration time as a default if reading fails...

EUVD-2026-103915

In the Linux kernel, the following vulnerability has been resolved: iio: light: rohm-bu27034: Fix infinite delay on error When reading an integration-time fails, the code will use error code to compute the sleep time. Fix this by using the smallest integration time as a default if reading fails...

CVE-2026-98660

The Linux kernel contains an out-of-bounds access vulnerability within the iio: pressure: bmp280 driver during a sampling frequency lookup. The root cause is that the bmp280_write_sampling_frequency() function indexes the sampling frequency table as a two-dimensional array using num_sampling_freq...

CVE-2026-98660 iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup The sampling frequency tables store each frequency as an integer part and a fractional part in micro units. numsamplingfreqavail is initialized to the...

EUVD-2026-103914

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup The sampling frequency tables store each frequency as an integer part and a fractional part in micro units. numsamplingfreqavail is initialized to the...

CVE-2026-98660 iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup The sampling frequency tables store each frequency as an integer part and a fractional part in micro units. numsamplingfreqavail is initialized to the...

CVE-2026-98659

The Linux kernel contains a vulnerability in the iio: pressure: rohm-bm1390 driver where the data reading function ignores cached error values and unconditionally returns 0. This causes the system to potentially return garbage data to the user instead of indicating a read failure. The fix involve...

CVE-2026-98659 iio: pressure: rohm-bm1390: Return error when read fails

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: rohm-bm1390: Return error when read fails The data reading function ignores the cached error value, and unconditionally returns 0. Return cached 'ret' -value after stopping the measurement so user knows if read...

CVE-2026-98659 iio: pressure: rohm-bm1390: Return error when read fails

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: rohm-bm1390: Return error when read fails The data reading function ignores the cached error value, and unconditionally returns 0. Return cached 'ret' -value after stopping the measurement so user knows if read...

EUVD-2026-103913

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: rohm-bm1390: Return error when read fails The data reading function ignores the cached error value, and unconditionally returns 0. Return cached 'ret' -value after stopping the measurement so user knows if read...