Description
In the Linux kernel, the following vulnerability has been resolved:

iio: pressure: rohm-bm1390: Return error when read fails

The data reading function ignores the cached error value, and
unconditionally returns 0. Return cached 'ret' -value after stopping
the measurement so user knows if read failed and data is garbage.
Published: 2026-10-18
Score: n/a
EPSS: n/a
KEV: No
Impact: Potential delivery of incorrect sensor data may cause system misbehavior or degrade reliability.
Action: Assess Impact
AI Analysis

Impact

The kernel driver for the Rohm bm1390 pressure sensor has a logic flaw where the read function disregards a cached error value and returns zero instead of propagating the failure. As a result, callers receive a spurious measurement even after a sensor read fails, potentially leading to incorrect system decisions based on garbage data. The vulnerability is a failure to propagate error information, which can compromise the integrity of sensor‑derived data.

Affected Systems

This issue affects the Linux kernel’s IIO pressure subsystem, specifically the rohm‑bm1390 driver. No specific kernel versions are listed in the CVE data, so any distribution build that includes this driver may be impacted. The vendor information provided lists the Linux kernel, but version details are missing.

Risk and Exploitability

No CVSS score is provided, and the EPSS score is unavailable, which indicates that the likelihood of exploitation is unknown but likely low. The vulnerability is not referenced in the CISA KEV database. Because the flaw merely causes incorrect sensor values rather than a direct control or privilege escalation, it is unlikely to be exploitable from unprivileged space. The risk is therefore limited to data integrity and potential functional issues rather than a high‑severity security breach.

Generated by OpenCVE AI on October 18, 2026 at 18:59 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Check the distribution’s kernel changelog or vendor advisories for a patch that addresses the rohm‑bm1390 read error handling.
  • If available, apply the fixed kernel version or apply an out‑of‑tree patch that restores the cached error return logic.
  • Verify sensor data integrity after applying the fix, and monitor applications that depend on pressure readings for unexpected behavior.

Generated by OpenCVE AI on October 18, 2026 at 18:59 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 18 Oct 2026 19:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-252

Sun, 18 Oct 2026 16:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: iio: pressure: rohm-bm1390: Return error when read fails The data reading function ignores the cached error value, and unconditionally returns 0. Return cached 'ret' -value after stopping the measurement so user knows if read failed and data is garbage.
Title iio: pressure: rohm-bm1390: Return error when read fails
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-18T15:44:17.572Z

Reserved: 2026-09-25T10:25:14.362Z

Link: CVE-2026-98659

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-18T16:17:19.213

Modified: 2026-10-18T16:17:19.213

Link: CVE-2026-98659

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-18T19:00:11Z

Weaknesses