interrupt handler · iio: health: max30102: fix NULL dereference
Affects MicrosoftSource GCVE Database
Not known to be exploited · fixed in f0ea4824deebf21dacfbe397c4b0a5fd3e745a8d : update Microsoft when convenient.
Data as of 28 Oct 2026, 09:14 UTC
Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD
- Patch
- Available – fixed in f0ea4824deebf21dacfbe397c4b0a5fd3e745a8d, eeb23ba97bd8016e815ef70300b8d34a0a316b90, 60699102827fdb51f9591414165359c8e867f302 +2
Exploitation evidence
Disclosed: evidence found.
CVE published 18 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade to a fixed release listed under Affected software.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
The vulnerability has been fixed in the affected versions 3.0 and 4.0. Users should apply the official patches or updates provided by Microsoft for these versions.
Description
A NULL pointer dereference vulnerability was identified and fixed in the interrupt handler of the iio: health: max30102 driver. This flaw could cause system instability or crashes when the interrupt handler dereferences a NULL pointer. The affected versions are 3.0 and 4.0 of the Microsoft product. No CVSS score or detailed impact information is provided.