Impact
The kionix-kx022a driver in the Linux kernel allocates memory for sensor samples when a buffer is enabled. If a regmap operation fails during this enable path, the newly allocated memory is never released, causing a memory leak. In addition, the driver does not reset hardware configuration or internal state flags on this error path, leaving interrupts and buffers enabled or leaving driver flags in an inconsistent state. These faults can lead to resource exhaustion, instability, and unpredictable device behavior, potentially impacting system integrity and availability.
Affected Systems
The vulnerability affects the Linux kernel's iio subsystem driver for the Kionix KX022A accelerometer. Any Linux distribution that includes this driver in its kernel receives the impact; no specific kernel version range is listed, so the issue applies broadly to kernels containing the unpatched driver.
Risk and Exploitability
The CVSS score and EPSS metric are not provided, so the precise severity cannot be quantified here. The flaw is local from the perspective of a user who can invoke the buffer enable path on the device, so the attack vector is likely local. An attacker with sufficient privileges could repeatedly trigger the error path to exhaust memory or destabilize the system, leading to a denial‑of‑service condition. The vulnerability is not listed in the CISA KEV catalog as of the latest data.
OpenCVE Enrichment