Impact
The MPU3050 gyroscope driver in the Linux kernel incorrectly calls free_irq() with the wrong handler variable, causing the interrupt resource to be released improperly during teardown. This flaw can result in a kernel crash or panic, thereby denying service to the host system.
Affected Systems
All Linux kernels that include the buggy MPU3050 iio driver are affected, regardless of distribution or kernel branch, as the issue resides in the core driver code. No specific kernel version range is listed; any release lacking the patch that corrects the free_irq call remains vulnerable until updated.
Risk and Exploitability
Because the CVSS score is now 5.5 and the EPSS score is <1%, the vulnerability is at moderate risk. The flaw can lead to a kernel crash, resulting in denial of service. It is not listed in CISA’s KEV catalog, indicating no confirmed exploitation. The likely attack vector requires local privilege or kernel context code execution during device shutdown, as the flaw occurs when the driver releases the IRQ handler.
OpenCVE Enrichment
Debian DLA
Debian DSA