CVE-2025-68330

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the bmc150-accel-core.c file where the bmc150 accel set interrupt() function is unconditionally called within the iio buffer setup ops, potentially leading to a kernel NULL pointer dereference if the device lacks interrupt support. This can result in a kernel splat. The issue appears to have existed since the driver's inception but has only recently manifested. The fix involves storing the IRQ number in the state struct to determine if IRQ support is present. The function bmc150 accel set interrupt() is involved in the issue, as well as bmc150 accel buffer postenable(), iio update buffers(), enable store(), and kernfs fop write iter().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.