CVE-2026-72479: iio: accel: mma8452: handle I2C read error(s) in mma8452_read()

Published Aug 15, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

iio: accel: mma8452: handle I2C read error(s) in mma8452read()

Currently, If i2csmbusreadi2cblockdata() fails but mma8452setruntimepmstate() succeeds, mma8452read() returns 0.

As a result, the caller mma8452readraw() assumes the read was successful and proceeds to use a buffer containing uninitialized stack memory.

Add proper checking of the I2C read return value and propagate errors to the caller.

Affected Software

1 affected component

Linux Linux kernel

Aug 15, 2026

CVE Published

via MITRE·05:57 AM

Data Sourced

via MITRE·05:57 AM

Description

The severity of CVE-2026-72479 is rated at 27.

To fix CVE-2026-72479, ensure that you update to the latest version of the Linux kernel that addresses this vulnerability.

CVE-2026-72479 affects the iio: accel: mma8452 driver within the Linux kernel.

The consequences of CVE-2026-72479 include incorrect handling of I2C read errors, which could lead to data integrity issues.

CVE-2026-72479 was published on August 15, 2026.