CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's handling of I2C read errors in the mma8452 accelerometer driver, where a failure in reading data can lead to the use of uninitialized stack memory. This can potentially result in unpredictable behavior or security issues due to the exposure of sensitive data. Linux system administrators and developers utilizing the affected kernel should prioritize applying the patch to mitigate risks associated with this flaw.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: iio: accel: mma8452: handle I2C read error(s) in mma8452_read() Currently, If i2c_smbus_read_i2c_block_data() fails but mma8452_set_runtime_pm_state() succeeds, mma8452_read() returns 0. As a result, the caller mma8452_read_raw() assumes the read was successful and proceeds to use a buffer containing uninitialized stack memory. Add proper checking of the I2C read return value and propagate errors to the caller.