CVE-2025-37969

iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo

MEDIUM

5.5

CVSS Score

Published: May 20, 2025 at 04:47 PM UTC

Updated: June 17, 2026 at 09:15 AM UTC

2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo Prevent st_lsm6dsx_read_tagged_fifo from falling in an infinite loop in case pattern_len is equal to zero and the device FIFO is not empty.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

11.0

Linux Kernel · Linux

95%

4.20 ≤ v < 5.10.2384.20 ≤ v < 5.15.1834.20 ≤ v < 5.4.2944.20 ≤ v < 6.1.1394.20 ≤ v < 6.12.294.20 ≤ v < 6.14.74.20 ≤ v < 6.154.20 ≤ v < 6.6.915.11 ≤ v < 5.15.1835.16 ≤ v < 6.1.1395.5 ≤ v < 5.10.2386.13 ≤ v < 6.14.76.2 ≤ v < 6.6.916.7 ≤ v < 6.12.294.20 6.15 rc1 6.15 rc2 6.15 rc3 6.15 rc4 6.15 rc5801a6e0af0c6cedca2e99155e343ad385a50f08e

Vendor states this is fixed in 16857370b3a30663515956b3bd27f3def6a2cf06 (fixed)

Vendor states this is fixed in 35b8c0a284983b71d92d082c54b7eb655ed4194f (fixed)

Vendor states this is fixed in 4db7d923a8c298788181b796f71adf6ca499f966 (fixed)

Vendor states this is fixed in 76727a1d81afde77d21ea8feaeb12d34605be6f4 (fixed)

Vendor states this is fixed in 8114ef86e2058e2554111b793596f17bee23fa15 (fixed)

Vendor states this is fixed in 9ce662851380fe2018e36e15c0bdcb1ad177ed95 (fixed)

Vendor states this is fixed in 9ddb4cf2192c213e4dba1733bbcdc94cf6d85bf7 (fixed)

Vendor states this is fixed in dadf9116108315f2eb14c7415c7805f392c476b4 (fixed)

Vendor states this is fixed in 4.20 (unaffected)

Vendor states this is fixed in 5.10.238 (unaffected)

Vendor states this is fixed in 5.15.183 (unaffected)

Vendor states this is fixed in 5.4.294 (unaffected)