7.8

CVE-2026-53386

iio: adc: ti-ads1298: add bounds check to pga_settings index

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: ti-ads1298: add bounds check to pga_settings index

ads1298_pga_settings has 7 elements but ADS1298_MASK_CH_PGA can yield
values 0-7. If it yields a value >= 7, this causes an out-of-bounds
array access. Add a bounds check and return -EINVAL if the index
is out of range.

Note that the remaining value b111 is reserved so should not be seen
in a correctly functioning system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 6.9 < 6.12.95
Linux ≫ Linux Kernel Version >= 6.13 < 6.18.37
Linux ≫ Linux Kernel Version >= 6.19 < 7.0.14
Linux ≫ Linux Kernel Version >= 7.1 < 7.1.2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.029
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-129 Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

https://git.kernel.org/stable/c/d5793975fc3b1780ba576812158ef22e3104e60e
Patch
https://git.kernel.org/stable/c/d08d82d83ed45fd8c001a9df66ad7ebb86c9d6c6
Patch
https://git.kernel.org/stable/c/abe0854e356b1bb814393ca884cb42b3eb12ce10
Patch
https://git.kernel.org/stable/c/abd776ded3e256889610595290f6ca46cb6e91ab
Patch
https://git.kernel.org/stable/c/95e8a48d7a85d4226934020e57815a3316d3a14b
Patch