CVE-2026-43307: iio: accel: adxl380: Avoid reading more entries than present in FIFO
In the Linux kernel, the following vulnerability has been resolved:
iio: accel: adxl380: Avoid reading more entries than present in FIFO
The interrupt handler reads FIFO entries in batches of N samples, where N is the number of scan elements that have been enabled. However, the sensor fills the FIFO one sample at a time, even when more than one channel is enabled. Therefore,the number of entries reported by the FIFO status registers may not be a multiple of N; if this number is not a multiple, the number of entries read from the FIFO may exceed the number of entries actually present.
To fix the above issue, round down the number of FIFO entries read from the status registers so that it is always a multiple of N.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.85-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.19.6-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.4-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43307?
The severity of CVE-2026-43307 is classified as a moderate risk due to potential misreads in FIFO entries.
How do I fix CVE-2026-43307?
To fix CVE-2026-43307, update your Linux kernel to the latest version where this vulnerability has been patched.
Which versions of the Linux kernel are affected by CVE-2026-43307?
CVE-2026-43307 affects specific versions of the Linux kernel that handle FIFO reading improperly.
What impact does CVE-2026-43307 have on system security?
CVE-2026-43307 could lead to incorrect data being processed, which may affect the stability and reliability of kernel operations.
Is CVE-2026-43307 being actively exploited?
As of the latest information, there is no public evidence indicating active exploitation of CVE-2026-43307.