Impact
The vulnerability leads to a division‑by‑zero error within the kernel’s handling of the adis16260 gyroscope driver when a user writes a zero value to the sampling_frequency sysfs attribute. This improper input causes a kernel crash, resulting in a denial of service where the affected system becomes unresponsive or requires a reboot. The flaw is a classic division‑by‑zero bug (CWE‑369) and does not directly enable code execution but can disrupt availability and potentially create a pivot for further attacks if the system remains unstable. The necessity for local write access to the sysfs interface is inferred from the description.
Affected Systems
The affected product is the Linux kernel. No specific kernel version is listed, but the issue resides in the iio gyro driver for the adis16260 device, which is part of the generic IIO subsystem used by many distributions. All Linux kernel builds that include this driver and do not apply the recent validation commit are vulnerable.
Risk and Exploitability
The EPSS score is reported as < 1% and the vulnerability is not listed in the CISA KEV catalog, indicating a very low probability of exploitation in the wild. Based on the description, it is inferred that an attacker must have local write access to the sampling_frequency sysfs attribute, typically available to root or potentially to privileged users. While the impact is significant (kernel crash), the limited exploit vector and low public exploitation likelihood moderate the overall risk for most environments. However, any system that exposes the adis16260 driver to local users remains at risk of denial of service if the attribute is abused.
OpenCVE Enrichment
Ubuntu USN