CVE-2026-31764

The record

In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: Set buffer sampling frequency for accelerometer only The st_lsm6dsx_hwfifo_odr_store() function, which is called when userspace writes the buffer sampling frequency sysfs attribute, calls st_lsm6dsx_check_odr(), which accesses the odr_table array at index `sensor->id`; since this array is only 2 entries long, an access for any sensor type other than accelerometer or gyroscope is an out-of-bounds access. The motivation for being able to set a buffer frequency different from the sensor sampling frequency is to support use cases that need accurate event detection (which requires a high sampling frequency) while retrieving sensor data at low frequency. Since all the supported event types are generated from acceleration data only, do not create the buffer sampling frequency attribute for sensor types other than the accelerometer.

Affected packages

Related vulnerabilities

• CVE-2026-119299 gopacket provides packet processing capabilities for Go. CWE-129
• CVE-2026-119278 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and… CWE-129
• CVE-2026-119143 Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service… CWE-129
• CVE-2026-93862 An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker… CWE-129
• CVE-2026-113881 A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access… CWE-129
• CVE-2026-116816 llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in… CWE-129
• CVE-2024-58400 llama.cpp before b3701 contains an out-of-bounds read vulnerability in… CWE-129
• CVE-2026-116731 Furnace through 0.6.8.3 contains an out-of-bounds write vulnerability in… CWE-129