{"id":"CVE-2026-98659","kind":"vulnerability","aliases":["CVE-2026-98659"],"related":[],"title":"Linux kernel: rohm-bm1390 pressure driver ignores failed reads","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: pressure: rohm-bm1390: Return error when read fails\n\nThe data reading function ignores the cached error value, and\nunconditionally returns 0. Return cached 'ret' -value after stopping\nthe measurement so user knows if read failed and data is garbage.","summary":"The IIO pressure driver for the ROHM BM1390 sensor discarded its cached error value and always returned success, so a failed measurement looked like valid data. The fix makes the read path return the real error code after stopping the measurement.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["iio","infrastructure","linux-kernel","rohm-bm1390"],"not_affected_if":["no-bm1390-sensor"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-18T16:17:19+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","triaged_at":"2026-10-25T05:19:31+00:00","updated_at":"2026-10-25T05:19:31+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T05:19:31Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Linux kernel: rohm-bm1390 pressure driver ignores failed reads","impact":"low","summary":"The IIO pressure driver for the ROHM BM1390 sensor discarded its cached error value and always returned success, so a failed measurement looked like valid data. The fix makes the read path return the real error code after stopping the measurement.","category":"infrastructure","nicknames":[],"who_cares":["linux-kernel","iio","rohm-bm1390"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Applications may act on garbage sensor readings without noticing failure.","analyst_note":"","how_to_check":"unknown","needs_analyst":false,"not_affected_if":["no-bm1390-sensor"],"who_is_affected":"unknown","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000493,"input_tokens":3323,"output_tokens":322,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-98659':13A,16A '0':98C 'alway':40B 'bm1390':5A,24B,32B,80C 'cach':36B,92C,100C 'code':61B 'cve':11A,14A 'data':50B,87C,114C 'discard':34B 'driver':7A,28B 'error':37B,60B,82C,93C 'fail':9A,45B,85C,112C 'fix':52B 'follow':71C 'function':89C 'garbag':116C 'ignor':8A,90C 'iio':17B,26B,76C 'infrastructur':18B 'kernel':2A,21B,69C 'know':109C 'like':48B 'linux':1A,20B,68C 'linux-kernel':19B 'look':47B 'make':53B 'measur':46B,65B,106C 'path':56B 'pressur':6A,27B,77C 'read':10A,55B,84C,88C,111C 'real':59B 'resolv':75C 'ret':101C 'return':41B,57B,81C,97C,99C 'rohm':4A,23B,31B,79C 'rohm-bm1390':3A,22B,78C 'sensor':33B 'stop':63B,104C 'success':42B 'uncondit':96C 'user':108C 'valid':49B 'valu':38B,94C,102C 'vulner':72C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T16:17:19+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98659","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98659","severity":null,"published_at":"2026-10-18T16:17:19+00:00","modified_at":"2026-10-19T10:19:30+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}