Impact
The Linux kernel light driver for the Rohm BU27034 sensor incorrectly used the return value from a failed integration‑time read to compute a sleep duration. When the read failed, the error code could trigger an excessively long or infinite sleep, effectively halting the driver and potentially blocking kernel I/O, which results in a denial‑of‑service condition. The patch replaces the erroneous error code with the smallest valid integration time to prevent the infinite delay.
Affected Systems
Any Linux installation that contains the iio light driver for the Rohm BU27034 sensor before the applied patch. The driver is part of the core kernel tree, so all mainstream distributions shipping the relevant kernel or an earlier release are potentially affected. The advisory does not list specific kernel versions or release dates.
Risk and Exploitability
The CVSS score is not published and the EPSS data are not available. The vulnerability is not included in the CISA KEV catalog. The likely attack vector is a local or elevated privilege attempt, or a malicious device that repeatedly fails to provide a valid integration time, which would trigger the error path and block the driver. Based on the description, it is inferred that such an exploit could cause a prolonged or permanent pause in kernel scheduling for the affected device, creating a high‑severity denial‑of‑service risk. No public exploit evidence is reported.
OpenCVE Enrichment