CVE-2026-98659: iio: pressure: rohm-bm1390: Return error when read fails
In the Linux kernel, the following vulnerability has been resolved:
iio: pressure: rohm-bm1390: Return error when read fails
The data reading function ignores the cached error value, and unconditionally returns 0. Return cached 'ret' -value after stopping the measurement so user knows if read failed and data is garbage.
Affected Software
Event History
Frequently Asked Questions
What happens when the affected sensor read fails?
The driver can return success even when a read operation has failed, causing userspace to treat the returned sensor data as valid even though it may be garbage.
How can I tell whether this issue is occurring on a system?
Look for failed reads from the ROHM BM1390 pressure-sensor driver that are reported as successful to userspace. Affected behavior is indicated when invalid or garbage pressure data is returned without an error from the read operation.
What is the mitigation if an update cannot be applied immediately?
The provided information does not identify a configuration workaround. Treat BM1390 readings as potentially unreliable when read failures are suspected, rather than relying solely on a successful return status.