Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-89937

iio: chemical: sgp30: Handle IAQ thread creation failure

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.270, 5.15.221, 6.1.188, 6.6.157, 6.12.110, and 2 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sgp30: Handle IAQ thread creation failure kthread_run() can fail and return an error pointer, but sgp_probe() stores it and returns success, so the device is registered without its IAQ thread and sgp_remove() later passes the error pointer to kthread_stop(). Return the error from probe instead.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From ce514124161ac2ceb13d10b6c40cbf05c8f0cc91 · fixed in bffd0655a35402b2df8857699f8248e5a534d214; From ce514124161ac2ceb13d10b6c40cbf05c8f0cc91 · fixed in bae0316c087b1ef625844003fe37e803a13819f3; From ce514124161ac2ceb13d10b6c40cbf05c8f0cc91 · fixed in 3c6b52b258e65a584e3f5122ed7f406bc89a946e; From ce514124161ac2ceb13d10b6c40cbf05c8f0cc91 · fixed in 3462c13bb0f50dec09235adb7fd04b6f617cf0cc; From ce514124161ac2ceb13d10b6c40cbf05c8f0cc91 · fixed in a5aaea17a1834d7254ff597e4d5e1bc60dfc4800; From ce514124161ac2ceb13d10b6c40cbf05c8f0cc91 · fixed in 2d386efb4c37a50739db19c7c8e49564fd53a570; From ce514124161ac2ceb13d10b6c40cbf05c8f0cc91 · fixed in 44d52c8b1c6da7ac1b0dffeeff6de68370746775; From ce514124161ac2ceb13d10b6c40cbf05c8f0cc91 · fixed in 1135d6875d2dbda3f6ec718f3421a6ce4378bd63

  • Linux Linux

    5.1

  • KernelLinux

    From 5.1.0 · fixed in 5.10.270; From 5.11.0 · fixed in 5.15.221; From 5.16.0 · fixed in 6.1.188; From 6.2.0 · fixed in 6.6.157; From 6.7.0 · fixed in 6.12.110; From 6.13.0 · fixed in 6.18.51; From 6.19.0 · fixed in 7.2.5

References 8

git.kernel.org