CVE Database›CVE-2024-35824

CVE-2024-35824

kernel: misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · May 17, 2024

Updated · October 31, 2026

Description

A vulnerability was found in the lis3lv02d_i2c driver in the Linux kernel. This issue involves regulators being enabled and disabled twice during the suspend and resume process, which could lead to unintended behavior or system instability.

Statement

This flaw is rated as Moderate impact because it requires local access on systems equipped with specific accelerometer hardware (STMicroelectronics LIS3LV02D via I2C) and can only be triggered during power management suspend and resume transitions. Typical enterprise server deployments do not include this sensor hardware, limiting the affected surface primarily to specialized or portable environments. The defect cannot be exploited remotely and results in kernel warnings or instability rather than direct code execution.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-911 · Improper Update of Reference Count