Impact
The kernel driver for the Rohm bm1390 pressure sensor has a logic flaw where the read function disregards a cached error value and returns zero instead of propagating the failure. As a result, callers receive a spurious measurement even after a sensor read fails, potentially leading to incorrect system decisions based on garbage data. The vulnerability is a failure to propagate error information, which can compromise the integrity of sensor‑derived data.
Affected Systems
This issue affects the Linux kernel’s IIO pressure subsystem, specifically the rohm‑bm1390 driver. No specific kernel versions are listed in the CVE data, so any distribution build that includes this driver may be impacted. The vendor information provided lists the Linux kernel, but version details are missing.
Risk and Exploitability
No CVSS score is provided, and the EPSS score is unavailable, which indicates that the likelihood of exploitation is unknown but likely low. The vulnerability is not referenced in the CISA KEV database. Because the flaw merely causes incorrect sensor values rather than a direct control or privilege escalation, it is unlikely to be exploitable from unprivileged space. The risk is therefore limited to data integrity and potential functional issues rather than a high‑severity security breach.
OpenCVE Enrichment