Impact
The Linux kernel mpu3050‑core driver fails to verify the return value of pm_runtime_get_sync(), which means it may attempt to access MPU3050 hardware that has not successfully resumed from a low‑power state. In addition, the driver unconditionally increments the usage counter even when power‑resume fails. This flaw matches CWE‑390 (Run a program after detecting an error) and can cause the kernel to interact with a device that is not in the expected state, leading to unreliable device operation and incorrect power‑state accounting.
Affected Systems
All Linux kernel builds that include the unpatched mpu3050‑core driver are affected. The CVE references list general Linux kernel environments without specifying exact versions, so any kernel configuration containing this driver without the recent patch is potentially vulnerable.
Risk and Exploitability
The EPSS score is less than 1 % and the CVSS score is 5.5, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local access to a system that uses an MPU3050 sensor and the Linux kernel; this inference is drawn from the description indicating the flaw affects kernel power‑management. The flaw does not enable code execution or arbitrary system compromise. The overall risk is limited primarily to unreliable device operation and inaccurate power‑state accounting, and no known public exploits target this issue.
OpenCVE Enrichment
Debian DLA