Buffer Overflow Vulnerability in BMG160 Gyroscope from Linux Kernel

CVE-2026-64495

What is CVE-2026-64495?

The Linux kernel contains a buffer overflow vulnerability in the BMG160 gyroscope driver, which occurs when the function bmg160_get_filter() attempts to access an entry in the bmg160_samp_freq_table without verifying the input values. If an invalid bandwidth value is provided, the function may attempt to read beyond the limits of the array, leading to unexpected behavior and potential system instability. This vulnerability can be exploited from userspace through the sysfs interface, making it a concerning issue for users of affected products. Appropriate error handling has been implemented to return an error code when an invalid entry is detected, thereby mitigating the risk.

References