CVE-2025-71198

Not scored yetLast modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection

The st_lsm6dsx_acc_channels array of struct iio_chan_spec has a non-NULL event_spec field, indicating support for IIO events. However, event detection is not supported for all sensors, and if userspace tries to configure accelerometer wakeup events on a sensor device that does not support them (e.g. LSM6DS0), st_lsm6dsx_write_event() dereferences a NULL pointer when trying to write to the wakeup register. Define an additional struct iio_chan_spec array whose members have a NULL event_spec field, and use this array instead of st_lsm6dsx_acc_channels for sensors without event detection capability.

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= b5969abfa8b8ed43ebd93479d394f664bd4a5a87, < 33c683417232b9111e29458954529942137780a3; >= b5969abfa8b8ed43ebd93479d394f664bd4a5a87, < 7673167fac9323110973a3300637adba7d45de3a; >= b5969abfa8b8ed43ebd93479d394f664bd4a5a87, < 4d60ffcdedfe2cdb68a1cde19bb292bc67451629; >= b5969abfa8b8ed43ebd93479d394f664bd4a5a87, < 81ed6e42d6e555dd978c9dd5e3f7c20cb121221b; >= b5969abfa8b8ed43ebd93479d394f664bd4a5a87, < c34e2e2d67b3bb8d5a6d09b0d6dac845cdd13fb3
LinuxLinux5.5

References

Timeline

Published
Feb 4, 2026
Last modified
Oct 30, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-71199In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adcCVE-2025-71209.8A vulnerability was found in Campcodes Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown fuCVE-2025-712005.5In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mCVE-2025-712017.1In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early read unlock of page with EOF in middle The read resulCVE-2025-712025.5In the Linux kernel, the following vulnerability has been resolved: iommu/sva: invalidate stale IOTLB entries for kernel address space IntCVE-2025-712037.0In the Linux kernel, the following vulnerability has been resolved: riscv: Sanitize syscall table indexing under speculation The syscall nCVE-2025-712045.5In the Linux kernel, the following vulnerability has been resolved: smb/server: fix refcount leak in parse_durable_handle_context() When tCVE-2025-71218.8A vulnerability was found in Campcodes Complaint Management System 1.0. It has been classified as critical. This affects an unknown part of CVE-2025-712109.8A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands oCVE-2025-712119.8A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands oCVE-2025-712127.8A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected instaCVE-2025-712137.8An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installatio
CVE-2025-71198: Unscored | Vulnix