CVE-2026-98659
Received Received - Intake

IIO Pressure Sensor Read Failure in ROHM BM1390

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: iio: pressure: rohm-bm1390: Return error when read fails The data reading function ignores the cached error value, and unconditionally returns 0. Return cached 'ret' -value after stopping the measurement so user knows if read failed and data is garbage.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-98659
EUVD
EUVD-2026-103913

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
Linux Linux 534674463a5978c6eda8185b31f5b903a9543f46
Linux Linux 534674463a5978c6eda8185b31f5b903a9543f46
Linux Linux 534674463a5978c6eda8185b31f5b903a9543f46
Linux Linux 6.14

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's IIO pressure sensor driver for the ROHM BM1390 sensor. The issue occurs when reading sensor data fails, but the function incorrectly returns 0 instead of indicating an error. This means applications may use invalid or corrupted data without knowing the read operation failed.

Detection Guidance

This vulnerability is specific to the Linux kernel's IIO pressure sensor driver (rohm-bm1390). Detection requires checking kernel logs for errors related to the rohm-bm1390 driver or pressure sensor read failures. No network-specific commands are applicable.

Impact Analysis

If you use a system with the affected Linux kernel and ROHM BM1390 pressure sensor, applications relying on pressure readings may receive incorrect data without warning. This could lead to incorrect system behavior, failed safety checks, or miscalculations in applications using pressure data.

Mitigation Strategies

Apply the latest Linux kernel update that includes the fix for this issue. Monitor kernel logs for pressure sensor errors after applying the update. If the driver is not critical, consider disabling it temporarily until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98659. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart