Junglewise Threat Intelligence

CVE-2026-64504: Linux Kernel stack overflow in BMC150 accelerometer driver

CVE-2026-64504 · Severity: info · CVSS 6.8 · Published 2026-07-25

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

A security vulnerability exists in the Linux kernel's driver for BMC150 accelerometers, which are sensors used to detect motion or orientation. A malicious or malfunctioning hardware device, or an attacker with physical access to the internal communication bus, could trigger a system crash or potentially execute unauthorized code. This could lead to a complete loss of system availability or the compromise of sensitive data on the affected device.

Technical details

A stack-based buffer overflow exists in the __bmc150_accel_fifo_flush() function within the BMC150 accelerometer driver (drivers/iio/accel/bmc150-accel-core.c). The driver fails to properly validate the frame count reported by the device's FIFO_STATUS register, which can return a value up to 127, while the destination on-stack buffer is only sized for 32 samples. An attacker capable of providing malicious hardware or tampering with the I2C/SPI bus can trigger an out-of-bounds write of up to 570 bytes, clobbering the stack canary, saved registers, and the return address. This vulnerability has been resolved by clamping the frame count to the maximum buffer length before the transfer occurs.

Affected products

  • Linux Linux Kernel 3bbec9773389 to 2fe0531dd73e, 35a3cd8fd65e, 3e766526827a, 89f4a4ca0ac3, b5a9f521e0a4, bfffc98f3de9, ce0e1cae2609, d0e6d924a548

Timeline

  • 2026-06-13: other: Vulnerability fixed in source code by developer
  • 2026-07-24: patched: Patch committed to stable tree by maintainer
  • 2026-07-25: disclosed: CVE published to NVD dataset

References

Related threats