CVE-2025-37969

iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo

State: Published
Severity: Not scored
Published: May 20, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo

Prevent st_lsm6dsx_read_tagged_fifo from falling in an infinite loop in case pattern_len is equal to zero and the device FIFO is not empty.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	801a6e0af0c6cedca2e99155e343ad385a50f08e to before 4db7d923a8c298788181b796f71adf6ca499f966Affected 801a6e0af0c6cedca2e99155e343ad385a50f08e to before 76727a1d81afde77d21ea8feaeb12d34605be6f4Affected 801a6e0af0c6cedca2e99155e343ad385a50f08e to before 35b8c0a284983b71d92d082c54b7eb655ed4194fAffected 801a6e0af0c6cedca2e99155e343ad385a50f08e to before 16857370b3a30663515956b3bd27f3def6a2cf06Affected 801a6e0af0c6cedca2e99155e343ad385a50f08e to before 9ce662851380fe2018e36e15c0bdcb1ad177ed95Affected 801a6e0af0c6cedca2e99155e343ad385a50f08e to before dadf9116108315f2eb14c7415c7805f392c476b4Affected 801a6e0af0c6cedca2e99155e343ad385a50f08e to before 9ddb4cf2192c213e4dba1733bbcdc94cf6d85bf7Affected 801a6e0af0c6cedca2e99155e343ad385a50f08e to before 8114ef86e2058e2554111b793596f17bee23fa15Affected
LinuxLinux	4.20Affected before 4.20Not affected 5.4.294 through 5.4.Not affected 5.10.238 through 5.10.Not affected 5.15.183 through 5.15.Not affected 6.1.139 through 6.1.Not affected 6.6.91 through 6.6.Not affected 6.12.29 through 6.12.Not affected 6.14.7 through 6.14.*Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

801a6e0af0c6cedca2e99155e343ad385a50f08e to before 4db7d923a8c298788181b796f71adf6ca499f966Affected
801a6e0af0c6cedca2e99155e343ad385a50f08e to before 76727a1d81afde77d21ea8feaeb12d34605be6f4Affected
801a6e0af0c6cedca2e99155e343ad385a50f08e to before 35b8c0a284983b71d92d082c54b7eb655ed4194fAffected
801a6e0af0c6cedca2e99155e343ad385a50f08e to before 16857370b3a30663515956b3bd27f3def6a2cf06Affected
801a6e0af0c6cedca2e99155e343ad385a50f08e to before 9ce662851380fe2018e36e15c0bdcb1ad177ed95Affected
801a6e0af0c6cedca2e99155e343ad385a50f08e to before dadf9116108315f2eb14c7415c7805f392c476b4Affected
801a6e0af0c6cedca2e99155e343ad385a50f08e to before 9ddb4cf2192c213e4dba1733bbcdc94cf6d85bf7Affected
801a6e0af0c6cedca2e99155e343ad385a50f08e to before 8114ef86e2058e2554111b793596f17bee23fa15Affected

LinuxLinux

4.20Affected
before 4.20Not affected
5.4.294 through 5.4.*Not affected
5.10.238 through 5.10.*Not affected
5.15.183 through 5.15.*Not affected
6.1.139 through 6.1.*Not affected
6.6.91 through 6.6.*Not affected
6.12.29 through 6.12.*Not affected
6.14.7 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.