7.8

CVE-2026-72480

iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling

ams_event_to_channel() may return a pointer past the end of
dev->channels when no matching scan_index is found. This can lead
to invalid memory access in ams_handle_event().

Add a bounds check in ams_event_to_channel() and return NULL when
no channel is found. Also guard the caller to safely handle this
case.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version d5c70627a79455154f5f636096abe6fe57510605
Version < 116d1f8805ae2daadbac89d24da4c0da50b9edae
Status affected
Version d5c70627a79455154f5f636096abe6fe57510605
Version < 94d158985b6ea011bdc26186f42d662a156da6cb
Status affected
Version d5c70627a79455154f5f636096abe6fe57510605
Version < 1d24f14e049fdd769146dda026496ed23b397ed9
Status affected
Version d5c70627a79455154f5f636096abe6fe57510605
Version < 9ac3675bf875792dced45efbf47116719a7c097b
Status affected
Version d5c70627a79455154f5f636096abe6fe57510605
Version < 3c374d33f1338dbb5676919c5194caa9c5aa1631
Status affected
Version d5c70627a79455154f5f636096abe6fe57510605
Version < 947eb6f0a274f8b15a0248051a65b069effd5057
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.17
Status affected
Version 0
Version < 5.17
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.14% 0.037
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/116d1f8805ae2daadbac89d24da4c0da50b9edae
https://git.kernel.org/stable/c/94d158985b6ea011bdc26186f42d662a156da6cb
https://git.kernel.org/stable/c/1d24f14e049fdd769146dda026496ed23b397ed9
https://git.kernel.org/stable/c/9ac3675bf875792dced45efbf47116719a7c097b
https://git.kernel.org/stable/c/3c374d33f1338dbb5676919c5194caa9c5aa1631
https://git.kernel.org/stable/c/947eb6f0a274f8b15a0248051a65b069effd5057