CVE-2026-98661: iio: light: rohm-bu27034: Fix infinite delay on error
In the Linux kernel, the following vulnerability has been resolved:
iio: light: rohm-bu27034: Fix infinite delay on error
When reading an integration-time fails, the code will use error code to compute the sleep time.
Fix this by using the smallest integration time as a default if reading fails.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In the ROHM BU27034 light sensor driver, use the smallest integration time as the default when reading the integration time fails, rather than using the error code to compute the sleep time; this prevents an infinite delay.
Event History
Frequently Asked Questions
What condition triggers the infinite delay?
The issue is triggered when reading the device integration time fails. The driver then uses the error code when calculating its sleep time, which can result in an infinite delay.
What behavior does the fix introduce when the integration-time read fails?
The fix uses the smallest integration time as the default sleep-time basis when reading the integration time fails, rather than using the error code.