iio: accel: kxcjk-1013: reject duplicate event disable
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.6.160, 6.12.113, 6.18.56, 7.2.10
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: reject duplicate event disable The IIO core does not filter duplicate writes to the event enable attribute. kxcjk1013_write_event_config() already ignores repeated enable requests, but a repeated disable request still calls kxcjk1013_set_power_state(data, false), dropping a runtime PM reference that was not acquired for this request. This can underflow the runtime PM usage count and trigger a "Runtime PM usage count underflow" warning. Return early when the requested state already matches ev_enable_state.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From b4b491c0832ef90a7a5070e5975bc8427f2049ca · fixed in 137c35cff4d4d69f73cbfc0bf7870bf379a7a364; From b4b491c0832ef90a7a5070e5975bc8427f2049ca · fixed in ad690c0c1b9131725619e352cb7c970488cbf436; From b4b491c0832ef90a7a5070e5975bc8427f2049ca · fixed in 3365209e758c845a197211645731f0e393a86012; From b4b491c0832ef90a7a5070e5975bc8427f2049ca · fixed in aa94a37b5a3e560c277dac6f9e5d0d75549a6583; From b4b491c0832ef90a7a5070e5975bc8427f2049ca · fixed in dd30c10ff60d2b30386c23bb7c61cc97f2385c97
- Linux Linux
3.18
- KernelLinux
From 3.18.0 · fixed in 6.6.160; From 6.7.0 · fixed in 6.12.113; From 6.13.0 · fixed in 6.18.56; From 6.19.0 · fixed in 7.2.10