{"id":"CVE-2026-98661","kind":"vulnerability","aliases":["CVE-2026-98661"],"related":[],"title":"Linux kernel: ROHM BU27034 light sensor driver can stall on error","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: light: rohm-bu27034: Fix infinite delay on error\n\nWhen reading an integration-time fails, the code will use error code to\ncompute the sleep time.\n\nFix this by using the smallest integration time as a default if\nreading fails.","summary":"The Linux IIO driver for the ROHM BU27034 light sensor could compute an enormous sleep time from an error code when reading the integration time failed, causing an effectively infinite delay. The fix falls back to the smallest integration time on read failure.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["embedded","iio","infrastructure","linux-kernel"],"not_affected_if":["sensor-not-present"],"how_to_check":"- unknown","fix":"- Update the Linux kernel to a release that includes the upstream fix for the rohm-bu27034 driver (exact fixed version not given in the sources).","status":"open","published_at":"2026-10-18T16:17:19+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","triaged_at":"2026-10-25T05:19:30+00:00","updated_at":"2026-10-25T05:19:30+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T05:19:30Z","model":"claude-haiku-5-5","output":{"fix":"- Update the Linux kernel to a release that includes the upstream fix for the rohm-bu27034 driver (exact fixed version not given in the sources).","reach":"local","title":"Linux kernel: ROHM BU27034 light sensor driver can stall on error","impact":"low","summary":"The Linux IIO driver for the ROHM BU27034 light sensor could compute an enormous sleep time from an error code when reading the integration time failed, causing an effectively infinite delay. The fix falls back to the smallest integration time on read failure.","category":"infrastructure","nicknames":[],"who_cares":["linux-kernel","iio","embedded"],"confidence":0.5,"needs_auth":"unknown","worst_case":"A kernel thread hangs on a sensor read error, causing a denial of service.","analyst_note":"","how_to_check":"- unknown","needs_analyst":false,"not_affected_if":["sensor-not-present"],"who_is_affected":"Systems running a Linux kernel with the iio light driver for the ROHM BU27034 sensor, typically embedded or hardware with that sensor attached. Machines without this sensor driver loaded are unlikely to be affected. The sources do not describe a remote trigger.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"low"},"cost_usd":0.000559,"input_tokens":3317,"output_tokens":454,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-98661':14A,17A 'back':58B 'bu27034':4A,31B,81C 'caus':50B 'code':43B,95C,99C 'comput':35B,101C 'could':34B 'cve':12A,15A 'default':115C 'delay':54B,84C 'driver':7A,27B 'effect':52B 'embed':18B 'enorm':37B 'error':11A,42B,86C,98C 'fail':49B,93C,118C 'failur':66B 'fall':57B 'fix':56B,82C,105C 'follow':72C 'iio':19B,26B,77C 'infinit':53B,83C 'infrastructur':20B 'integr':47B,62B,91C,111C 'integration-tim':90C 'kernel':2A,23B,70C 'light':5A,32B,78C 'linux':1A,22B,25B,69C 'linux-kernel':21B 'read':45B,65B,88C,117C 'resolv':76C 'rohm':3A,30B,80C 'rohm-bu27034':79C 'sensor':6A,33B 'sleep':38B,103C 'smallest':61B,110C 'stall':9A 'time':39B,48B,63B,92C,104C,112C 'use':97C,108C 'vulner':73C","nicknames":[],"mitigations":[],"who_affected":"Systems running a Linux kernel with the iio light driver for the ROHM BU27034 sensor, typically embedded or hardware with that sensor attached. Machines without this sensor driver loaded are unlikely to be affected. The sources do not describe a remote trigger.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T16:17:19+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98661","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98661","severity":null,"published_at":"2026-10-18T16:17:19+00:00","modified_at":"2026-10-19T10:19:30+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}