Impact
The Linux kernel light driver for the Rohm BU27034 sensor incorrectly used the return value from a failed integration‑time read to compute a sleep duration. When the read failed, the error code could trigger an excessively long or infinite sleep, effectively halting the driver and potentially blocking kernel I/O, which results in a denial‑of‑service condition. The patch replaces the erroneous error code with the smallest valid integration time to prevent the infinite delay.
Affected Systems
Any Linux installation that contains the iio light driver for the Rohm BU27034 sensor before the applied patch. The driver is part of the core kernel tree, so all mainstream distributions shipping the relevant kernel or an earlier release are potentially affected. The advisory does not list specific kernel versions or release dates.
Risk and Exploitability
The CVSS score is 2.5, the EPSS score is < 1%, and it is not listed in the CISA KEV catalog. The likely attack vector is local or elevated privilege, or a malicious device that repeatedly fails to provide a valid integration time, which would trigger the error path and block the driver. No public exploit evidence is reported.
OpenCVE Enrichment
Debian DLA