CVE-2025-71198

Not scored yetLast modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection

The st_lsm6dsx_acc_channels array of struct iio_chan_spec has a non-NULL event_spec field, indicating support for IIO events. However, event detection is not supported for all sensors, and if userspace tries to configure accelerometer wakeup events on a sensor device that does not support them (e.g. LSM6DS0), st_lsm6dsx_write_event() dereferences a NULL pointer when trying to write to the wakeup register. Define an additional struct iio_chan_spec array whose members have a NULL event_spec field, and use this array instead of st_lsm6dsx_acc_channels for sensors without event detection capability.

Metrics

No CVSS score has been published yet.

Affected software

No affected versions have been published.

Timeline

Published
Feb 4, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-71199In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adcCVE-2025-71209.8A vulnerability was found in Campcodes Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown fuCVE-2025-712005.5In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mCVE-2025-712017.1In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early read unlock of page with EOF in middle The read resulCVE-2025-712025.5In the Linux kernel, the following vulnerability has been resolved: iommu/sva: invalidate stale IOTLB entries for kernel address space IntCVE-2025-712037.0In the Linux kernel, the following vulnerability has been resolved: riscv: Sanitize syscall table indexing under speculation The syscall nCVE-2025-712045.5In the Linux kernel, the following vulnerability has been resolved: smb/server: fix refcount leak in parse_durable_handle_context() When tCVE-2025-71218.8A vulnerability was found in Campcodes Complaint Management System 1.0. It has been classified as critical. This affects an unknown part of CVE-2025-712109.8A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands oCVE-2025-712119.8A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands oCVE-2025-712127.8A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected instaCVE-2025-712137.8An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installatio
CVE-2025-71198: Unscored | Vulnix