Description
In the Linux kernel, the following vulnerability has been resolved:

iio: light: rohm-bu27034: Fix infinite delay on error

When reading an integration-time fails, the code will use error code to
compute the sleep time.

Fix this by using the smallest integration time as a default if
reading fails.
Published: 2026-10-18
Score: n/a
EPSS: n/a
KEV: No
Impact: Denial of Service via infinite delay on error
Action: Patch kernel
AI Analysis

Impact

The Linux kernel light driver for the Rohm BU27034 sensor incorrectly used the return value from a failed integration‑time read to compute a sleep duration. When the read failed, the error code could trigger an excessively long or infinite sleep, effectively halting the driver and potentially blocking kernel I/O, which results in a denial‑of‑service condition. The patch replaces the erroneous error code with the smallest valid integration time to prevent the infinite delay.

Affected Systems

Any Linux installation that contains the iio light driver for the Rohm BU27034 sensor before the applied patch. The driver is part of the core kernel tree, so all mainstream distributions shipping the relevant kernel or an earlier release are potentially affected. The advisory does not list specific kernel versions or release dates.

Risk and Exploitability

The CVSS score is not published and the EPSS data are not available. The vulnerability is not included in the CISA KEV catalog. The likely attack vector is a local or elevated privilege attempt, or a malicious device that repeatedly fails to provide a valid integration time, which would trigger the error path and block the driver. Based on the description, it is inferred that such an exploit could cause a prolonged or permanent pause in kernel scheduling for the affected device, creating a high‑severity denial‑of‑service risk. No public exploit evidence is reported.

Generated by OpenCVE AI on October 18, 2026 at 22:58 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update the Linux kernel to a version that includes the fix for the iio light driver.
  • If a full kernel upgrade is impractical, rebuild or recompile the iio light driver with the patched code.
  • If the Rohm BU27034 sensor is not required, disable the driver to remove the associated risk.

Generated by OpenCVE AI on October 18, 2026 at 22:58 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 18 Oct 2026 23:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-400
CWE-779

Sun, 18 Oct 2026 16:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: iio: light: rohm-bu27034: Fix infinite delay on error When reading an integration-time fails, the code will use error code to compute the sleep time. Fix this by using the smallest integration time as a default if reading fails.
Title iio: light: rohm-bu27034: Fix infinite delay on error
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-18T15:44:21.543Z

Reserved: 2026-09-25T10:25:14.363Z

Link: CVE-2026-98661

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-18T16:17:19.410

Modified: 2026-10-18T16:17:19.410

Link: CVE-2026-98661

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-18T23:00:12Z

Weaknesses
  • CWE-400

    Uncontrolled Resource Consumption

  • CWE-779

    Logging of Excessive Data