-

CVE-2026-89933

iio: pressure: dps310: fix NULL pointer dereference on ACPI probe

In the Linux kernel, the following vulnerability has been resolved:

iio: pressure: dps310: fix NULL pointer dereference on ACPI probe

When the device is enumerated through its ACPI HID (IFX3100),
i2c_client_get_device_id() returns NULL: the ACPI-derived client name
does not match the driver's i2c_device_id table. dps310_probe() then
dereferences that NULL pointer in "iio->name = id->name" and crashes the
kernel during probe.

The IIO device name is always "dps310", so set it directly and drop the
now-unused device-id lookup.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 72ff282819d0526d3e4417c2a61414557981b5af
Version < a32a39da18e01b20c2ab65af9be34dc870187382
Status affected
Version 72ff282819d0526d3e4417c2a61414557981b5af
Version < bc7b09e701b4175fc683b579fcdef3bfac809239
Status affected
Version 72ff282819d0526d3e4417c2a61414557981b5af
Version < 7ded5b76ec2df6a3fb1bfde0d1869cde363fef30
Status affected
Version 72ff282819d0526d3e4417c2a61414557981b5af
Version < 3fa189573cca284ae663bfd2d5b9ed755bec5e9d
Status affected
Version 72ff282819d0526d3e4417c2a61414557981b5af
Version < 26e9213898fc949923188ef0aeea31fc87708836
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.18
Status affected
Version 0
Version < 5.18
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.51
Status unaffected
Version <= 7.2.*
Version 7.2.5
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.102
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/a32a39da18e01b20c2ab65af9be34dc870187382
https://git.kernel.org/stable/c/bc7b09e701b4175fc683b579fcdef3bfac809239
https://git.kernel.org/stable/c/7ded5b76ec2df6a3fb1bfde0d1869cde363fef30
https://git.kernel.org/stable/c/3fa189573cca284ae663bfd2d5b9ed755bec5e9d
https://git.kernel.org/stable/c/26e9213898fc949923188ef0aeea31fc87708836