CVE-2026-89933 PUBLISHED

iio: pressure: dps310: fix NULL pointer dereference on ACPI probe

Assigner: Linux
Reserved: 11.09.2026 Published: 16.09.2026 Updated: 16.09.2026

In the Linux kernel, the following vulnerability has been resolved:

iio: pressure: dps310: fix NULL pointer dereference on ACPI probe

When the device is enumerated through its ACPI HID (IFX3100), i2c_client_get_device_id() returns NULL: the ACPI-derived client name does not match the driver's i2c_device_id table. dps310_probe() then dereferences that NULL pointer in "iio->name = id->name" and crashes the kernel during probe.

The IIO device name is always "dps310", so set it directly and drop the now-unused device-id lookup.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 72ff282819d0526d3e4417c2a61414557981b5af to a32a39da18e01b20c2ab65af9be34dc870187382 (excl.)
  • affected from 72ff282819d0526d3e4417c2a61414557981b5af to bc7b09e701b4175fc683b579fcdef3bfac809239 (excl.)
  • affected from 72ff282819d0526d3e4417c2a61414557981b5af to 7ded5b76ec2df6a3fb1bfde0d1869cde363fef30 (excl.)
  • affected from 72ff282819d0526d3e4417c2a61414557981b5af to 3fa189573cca284ae663bfd2d5b9ed755bec5e9d (excl.)
  • affected from 72ff282819d0526d3e4417c2a61414557981b5af to 26e9213898fc949923188ef0aeea31fc87708836 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 5.18 is affected
  • unaffected from 0 to 5.18 (excl.)
  • unaffected from 6.6.157 to 6.6.* (incl.)
  • unaffected from 6.12.110 to 6.12.* (incl.)
  • unaffected from 6.18.51 to 6.18.* (incl.)
  • unaffected from 7.2.5 to 7.2.* (incl.)
  • unaffected from 7.3-rc1 to * (incl.)

References