CVE-2024-50198

iio: light: veml6030: fix IIO device retrieval from embedded device

MEDIUM

5.5

CVSS Score

Published: November 8, 2024 at 05:54 AM UTC

Updated: June 17, 2026 at 08:03 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6030: fix IIO device retrieval from embedded device The dev pointer that is received as an argument in the in_illuminance_period_available_show function references the device embedded in the IIO device, not in the i2c client. dev_to_iio_dev() must be used to accessthe right data. The current implementation leads to a segmentation fault on every attempt to read the attribute because indio_dev gets a NULL assignment. This bug has been present since the first appearance of the driver, apparently since the last version (V6) before getting applied. A constant attribute was used until then, and the last modifications might have not been tested again.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

5.11 ≤ v < 5.15.1695.16 ≤ v < 6.1.1145.5 ≤ v < 5.10.2285.5 ≤ v < 5.15.1695.5 ≤ v < 6.1.1145.5 ≤ v < 6.11.55.5 ≤ v < 6.125.5 ≤ v < 6.6.586.2 ≤ v < 6.6.586.7 ≤ v < 6.11.56.12 rc1 6.12 rc2 6.12 rc37b779f573c48e1ad6da1d6ea5f181f3ecd666bf6

Vendor states this is fixed in 2cbb41abae65626736b8b52cf3b9339612c5a86a (fixed)

Vendor states this is fixed in 50039aec43a82ad2495f2d0fb0c289c8717b4bb2 (fixed)

Vendor states this is fixed in 905166531831beb067fffe2bdfc98031ffe89087 (fixed)

Vendor states this is fixed in bcb90518ccd9e10bf6ab29e31994aab93e4a4361 (fixed)

Vendor states this is fixed in bf3ab8e1c28f10df0823d4ff312f83c952b06a15 (fixed)

Vendor states this is fixed in c7c44e57750c31de43906d97813273fdffcf7d02 (fixed)

Vendor states this is fixed in 5.10.228 (unaffected)

Vendor states this is fixed in 5.15.169 (unaffected)

Vendor states this is fixed in 5.5 (unaffected)

Vendor states this is fixed in 6.1.114 (unaffected)

Vendor states this is fixed in 6.11.5 (unaffected)

Vendor states this is fixed in 6.12 (unaffected)