Impact
The kionix-kx022a driver allocates memory for sensor samples when a buffer is enabled. If a regmap operation fails during this enable path, the newly‑allocated memory is never released, producing a memory leak. Additionally, the driver does not revert the hardware configuration or reset internal state flags on this error path, leaving interrupts and buffers enabled and driver flags in an inconsistent state. This flaw involves improper resource management (CWE‑772).
Affected Systems
The flaw exists in the Linux kernel’s iio subsystem driver for the Kionix KX022A accelerometer. Any Linux distribution shipping a kernel that includes this driver in its iio module is affected; no specific kernel version range is listed, so the issue applies to all kernels containing the unpatched driver.
Risk and Exploitability
The CVSS score of 1.9 and EPSS of less than 1% indicate low severity and low exploitation likelihood. The weakness is local; an attacker with sufficient privileges to enable the IIO buffer can repeatedly trigger the error path, potentially exhausting memory and causing a denial‑of‑service. The vulnerability is not listed in CISA KEV.
OpenCVE Enrichment
Debian DLA