Executive brief
A vulnerability in the Linux kernel's MPU-3050 gyroscope driver could allow the system to attempt hardware operations even when the device fails to wake up from a low-power state. This occurs because the driver does not properly check for errors during power management transitions. While primarily a stability issue, it could lead to unpredictable system behavior or local denial-of-service when interacting with motion-sensing hardware.
Technical details
A vulnerability in `drivers/iio/gyro/mpu3050-core.c` exists due to improper error handling of `pm_runtime_get_sync()`. The driver fails to verify if the device successfully resumed before proceeding with hardware access, and it unconditionally increments the device usage count even on failure. An attacker with local access to IIO (Industrial I/O) interfaces could potentially trigger system instability. The fix replaces the vulnerable call with `pm_runtime_resume_and_get()` and ensures proper cleanup via `pm_runtime_put_autosuspend()` during preenable failures.
Affected products
- Linux Linux Kernel Fixed in versions 2a86a39, 35f54e7, 42685cf, 66c0d1, 7a3dec5, 8544c48, 935f57d, acc3949
Timeline
- 2026-02-16: other: Patch authored
- 2026-05-08: disclosed: CVE published
References
- https://git.kernel.org/stable/c/2a86a396aa001a9f9ba2d37dda36573a76f17c90
- https://git.kernel.org/stable/c/35f54e7bcb1eccdc6e5bff06580eeef2e0ff3677
- https://git.kernel.org/stable/c/42685cf96e28262e0b84d74447f3d99f3f6a72e0
- https://git.kernel.org/stable/c/66c0d1d600e7be034959cf49edab104cb5a39258
- https://git.kernel.org/stable/c/7a3dec5b265cf87678b10c98a72a435a8e769bb7
- https://git.kernel.org/stable/c/8544c488e50206f00630a8bbba43d2c8bd290345
- https://git.kernel.org/stable/c/935f57dd43492240e1ca220dd065d624efece6be