CVE-2026-31761: iio: gyro: mpu3050: Move iio_device_register() to correct location
In the Linux kernel, the following vulnerability has been resolved:
iio: gyro: mpu3050: Move iiodeviceregister() to correct location
iiodeviceregister() should be at the end of the probe function to prevent race conditions.
Place iiodeviceregister() at the end of the probe function and place iiodeviceunregister() accordingly.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In the mpu3050 IIO gyro probe function, move the iio_device_register() call to the end of the probe function to prevent race conditions; place iio_device_unregister() accordingly.
Linux kernel (IIO gyro driver: mpu3050) iio_device_register() call placement = Move iio_device_register() to the end of the probe function (and ensure iio_device_unregister() is placed accordingly)
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running the Linux kernel with the iio: gyro: mpu3050 driver are in scope. The issue is in that driver’s probe-time device registration sequence.
What level of access does an attacker need?
The CVSS vector indicates local access and low privileges are required. No user interaction is required.
What is the potential impact if exploited?
The issue is rated high severity with a CVSS 3.1 score of 7.8. The vector indicates high impact to confidentiality, integrity, and availability.
What change addresses the race condition?
The fix moves iio_device_register() to the end of the driver probe function and places iio_device_unregister() accordingly, preventing registration before probe initialization is complete.