CVE-2024-35824
kernel: misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 17, 2024
Updated · October 31, 2026
Description
A vulnerability was found in the lis3lv02d_i2c driver in the Linux kernel. This issue involves regulators being enabled and disabled twice during the suspend and resume process, which could lead to unintended behavior or system instability.
Statement
This flaw is rated as Moderate impact because it requires local access on systems equipped with specific accelerometer hardware (STMicroelectronics LIS3LV02D via I2C) and can only be triggered during power management suspend and resume transitions. Typical enterprise server deployments do not include this sensor hardware, limiting the affected surface primarily to specialized or portable environments. The defect cannot be exploited remotely and results in kernel warnings or instability rather than direct code execution.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-911 · Improper Update of Reference Count