Live › vulnerability › CVE-2026-98665
Go to dashboardA kernel driver for the MAX30102 heart-rate sensor dereferenced a NULL pointer in its interrupt handler when no data buffer was active. The result is a kernel crash (denial of service) triggered by the sensor's interrupt line.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Only systems with a MAX30102 sensor bound to this IIO driver are exposed, which is typically embedded or specialized hardware rather than servers. Machines without that hardware or without the max30102 module loaded can skip it.
No product ranges from the sources yet.
max30102 kernel module is loaded with lsmod | grep max30102modprobe -r max30102 if the sensor is not neededEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
iio: health: max30102: fix NULL dereference in interrupt handler
The interrupt is requested in max30102_probe() and stays enabled for the lifetime of the device, but indio_dev->active_scan_mask is only valid while a buffer is enabled. When an interrupt arrives while no buffer is enabled, the handler dereferences the NULL active_scan_mask:
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 Call trace: __bitmap_weight+0x64/0x98 (P) max30102_interrupt_handler+0x48/0x160 [max30102]
Call max30102_fifo_count() at the top of the handler and return early unless it reports a FIFO sample is ready. Because FIFO_RDY is the only interrupt source enabled in max30102_chip_init(), an invocation of max30102_interrupt_handler() without the FIFO_RDY interrupt status bit set carries no data to read and can return before touching active_scan_mask. A negative return from max30102_fifo_count() indicates a failed interrupt status read and is treated the same way.
This page as .md · .json · in your agent: get_signal("CVE-2026-98665")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.