CVE-2025-37969
iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo Prevent st_lsm6dsx_read_tagged_fifo from falling in an infinite loop in case pattern_len is equal to zero and the device FIFO is not empty.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
4.20
References 8
git.kernel.org
- stable/c/4db7d923a8c298788181b796f71adf6ca499f966
- stable/c/76727a1d81afde77d21ea8feaeb12d34605be6f4
- stable/c/35b8c0a284983b71d92d082c54b7eb655ed4194f
- stable/c/16857370b3a30663515956b3bd27f3def6a2cf06
- stable/c/9ce662851380fe2018e36e15c0bdcb1ad177ed95
- stable/c/dadf9116108315f2eb14c7415c7805f392c476b4
- stable/c/9ddb4cf2192c213e4dba1733bbcdc94cf6d85bf7
- stable/c/8114ef86e2058e2554111b793596f17bee23fa15