CVE-2026-31761: iio: gyro: mpu3050: Move iio_device_register() to correct location
In the Linux kernel, the following vulnerability has been resolved:
iio: gyro: mpu3050: Move iiodeviceregister() to correct location
iiodeviceregister() should be at the end of the probe function to prevent race conditions.
Place iiodeviceregister() at the end of the probe function and place iiodeviceunregister() accordingly.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running the Linux kernel with the iio: gyro: mpu3050 driver are in scope. The issue is in that driver’s probe-time device registration sequence.
What level of access does an attacker need?
The CVSS vector indicates local access and low privileges are required. No user interaction is required.
What is the potential impact if exploited?
The issue is rated high severity with a CVSS 3.1 score of 7.8. The vector indicates high impact to confidentiality, integrity, and availability.
What change addresses the race condition?
The fix moves iio_device_register() to the end of the driver probe function and places iio_device_unregister() accordingly, preventing registration before probe initialization is complete.