Description
In the Linux kernel, the following vulnerability has been resolved:
iio: adc: rzg2l_adc: Set driver data before enabling runtime PM
When stress-testing the system by repeatedly unbinding and binding the ADC device in a loop, and the ADC is a supplier for another device (e.g., a thermal hardware block that reads temperature through the ADC), it may happen that the ADC device is runtime-resumed immediately after runtime PM is enabled, triggered by its consumer. At this point, since drvdata is not yet set and the driver's runtime PM callbacks rely on it, a crash can occur. To avoid this, set drvdata just after it was allocated.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HAffected software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 89ee8174e8c8db0efc75b26f2307114b38d61354, < e7ce902db071a7b3e696a43d6e14ca57360deee6; >= 89ee8174e8c8db0efc75b26f2307114b38d61354, < c69e13965f26b8058f538ea8bdbd2d7718cf1fbe |
| Linux | Linux | 6.14 |
References
Timeline
- Published
- Sep 11, 2025
- Last modified
- Oct 19, 2026
- NVD status
- Analyzed