Linux Kernel MMA8452 Accelerometer Driver I2C Client Handling Vulnerability

Vulnerability

A vulnerability in the Linux kernel's IIO accelerometer driver for the MMA8452 sensor has been addressed. The issue arose from incorrect logic in retrieving the MMA8452 data, specifically in how the device's I2C client was identified. The original approach inadvertently worked by using the device's driver data, but after a recent commit removed unnecessary self-driver data, this method failed, leading to a null pointer dereference and a kernel crash when the available scale was accessed from userspace. The vulnerability has been fixed by properly using the device's driver data to obtain the IIO device reference, ensuring correct I2C client identification.

Impact

Exploitation of this vulnerability could lead to a kernel crash due to a null pointer dereference, causing a denial of service by interrupting normal system operations.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.