CVE-2026-72479

A flaw was found in the Linux kernel's iio: accel: mma8452 module. When an I2C read operation fails, the mma8452_read() function incorrectly returns a success status. This can lead to the mma8452_read_raw() function using uninitialized stack memory, potentially resulting in information disclosure.

This vulnerability is rated as having a Moderate impact because exploitation requires local access on a system with affected hardware and could lead to the disclosure of uninitialized kernel stack memory. The mma8452 driver is designed specifically for I2C-connected industrial accelerometer sensors, which are not typically enabled or present in enterprise server installations. Consequently, standard Red Hat Enterprise Linux deployments do not include or load this driver by default, significantly reducing real-world exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.