In the Linux kernel, the following vulnerability has been resolved:
iio: imu: bno055: fix OOB access of hw_xlate array
Fix a potential out-of-bounds array access of the hw_xlate array in bno055.c.
In bno055_get_regmask(), hw_xlate was iterated over the length of the vals array instead of the length of the hw_xlate array. In the case of bno055_gyr_scale, the vals array is larger than the hw_xlate array, so this could result in an out-of-bounds access. In practice, this shouldn't happen though because a match should always be found which breaks out of the for loop before it iterates beyond the end of the hw_xlate array.
By adding a new hw_xlate_len field to the bno055_sysfs_attr, we can be sure we are iterating over the correct length.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 25, 2025 | Sep 25, 2025 |
| Suse | — | Upgrade dtb-amazonUpgrade kernel-rt-extraUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade dtb-apmUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-exynosUpgrade kernel-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade kernel-default-develUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-rt-optionalUpgrade dtb-qcomUpgrade dlm-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-lgUpgrade reiserfs-kmp-azureUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade dtb-rockchipUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade kernel-debug-vdsoUpgrade dtb-appleUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade kernel-rt_debug-develUpgrade kernel-devel-rtUpgrade kernel-defaultUpgrade dtb-hisiliconUpgrade dtb-xilinxUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade dtb-freescaleUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade kernel-azure-extraUpgrade dtb-allwinnerUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade kernel-debugUpgrade kernel-docs-htmlUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade kselftests-kmp-azureUpgrade dtb-marvellUpgrade dtb-caviumUpgrade dtb-armUpgrade dtb-alteraUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade gfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-azureUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-rt_debug | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-azure-fipsUpgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oem-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-ibmUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-oracleUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-gke-64kUpgrade linux-image-oracle-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-raspi-6.8Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-virtual-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-gkeopUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-xilinxUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-22.04 | Feb 12, 2026 | Sep 5, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Sep 5, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub