CVE-2026-43307 Details
Description
In the Linux kernel, the following vulnerability has been resolved: iio: accel: adxl380: Avoid reading more entries than present in FIFO The interrupt handler reads FIFO entries in batches of N samples, where N is the number of scan elements that have been enabled. However, the sensor fills the FIFO one sample at a time, even when more than one channel is enabled. Therefore,the number of entries reported by the FIFO status registers may not be a multiple of N; if this number is not a multiple, the number of entries read from the FIFO may exceed the number of entries actually present. To fix the above issue, round down the number of FIFO entries read from the status registers so that it is always a multiple of N.
A vulnerability exists in the Linux kernel's ADXL380 accelerometer driver, specifically in how the interrupt handler processes FIFO (First In, First Out) entries. The driver reads FIFO data in batches based on the number of enabled scan elements. However, the ADXL380 sensor populates the FIFO one sample at a time, leading to a mismatch. This can cause the driver to read more entries than are actually available, potentially resulting in incorrect data handling. The issue affects the Linux kernel stable tree.
The vulnerability has been addressed in the Linux kernel. Users can upgrade to the latest version to apply the fix.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/a40f316085985f916ba1599fc303fdbc6a078e86 | kernel.org | Patch |
| https://git.kernel.org/stable/c/a8e88edfd69df7b63c882aa53e61e7c078806ad7 | kernel.org | Patch |
| https://git.kernel.org/stable/c/c1b14015224cfcccd5356333763f2f4f401bd810 | kernel.org | Patch |
| https://git.kernel.org/stable/c/f42ddb2945ae4ce2b6f1c2e7aae9f14455a734d3 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.12, < 6.12.75 >= 6.13, < 6.18.16 >= 6.19, < 6.19.6 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 15, 2026 | Initial Analysis | [email protected] |
| May 11, 2026 | CVE Modified | kernel.org |
| May 8, 2026 | New CVE Received | kernel.org |