Executive brief
A vulnerability in the Linux kernel's driver for the ADXL380 accelerometer could allow a local user to cause a system crash or potentially access sensitive memory. The issue occurs when the system reads data from the sensor's internal memory (FIFO) incorrectly, attempting to read more data than is actually available. This could lead to unpredictable system behavior or a denial of service in industrial or mobile devices using this specific hardware.
Technical details
A vulnerability exists in the adxl380_irq_handler function within drivers/iio/accel/adxl380.c of the Linux kernel. The interrupt handler reads FIFO entries in batches of N samples based on enabled scan elements; however, because the sensor populates the FIFO one sample at a time, the total number of entries may not be a multiple of N. This discrepancy causes the driver to attempt reading more entries than are present in the FIFO status registers, leading to an out-of-bounds read. An attacker with local access could exploit this to cause a kernel panic (DoS) or potentially read adjacent kernel memory. The fix involves rounding down the number of FIFO entries to the nearest multiple of the set size before processing.
Affected products
- Linux Linux Kernel df36de13677a to c1b14015224cfcccd5356333763f2f4f401bd810
Timeline
- 2026-01-19: other: Patch authored by Francesco Lavra
- 2026-05-08: disclosed: CVE published by kernel.org
- 2026-05-08: advisory