CVE-2026-31764
Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
01/05/2026
Última modificación:
08/05/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
iio: imu: st_lsm6dsx: Set buffer sampling frequency for accelerometer only<br />
<br />
The st_lsm6dsx_hwfifo_odr_store() function, which is called when userspace<br />
writes the buffer sampling frequency sysfs attribute, calls<br />
st_lsm6dsx_check_odr(), which accesses the odr_table array at index<br />
`sensor->id`; since this array is only 2 entries long, an access for any<br />
sensor type other than accelerometer or gyroscope is an out-of-bounds<br />
access.<br />
<br />
The motivation for being able to set a buffer frequency different from the<br />
sensor sampling frequency is to support use cases that need accurate event<br />
detection (which requires a high sampling frequency) while retrieving<br />
sensor data at low frequency. Since all the supported event types are<br />
generated from acceleration data only, do not create the buffer sampling<br />
frequency attribute for sensor types other than the accelerometer.
Impacto
Puntuación base 3.x
7.80
Gravedad 3.x
ALTA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.19 (incluyendo) | 6.19.12 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página



