CVE-2026-72480
In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling ams_event_to_chann…
Impact
In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling ams_event_to_channel() may return a pointer past the end of dev->channels when no matching scan_index is found. This can lead to invalid memory access in ams_handle_event(). Add a bounds check in ams_event_to_channel() and return NULL when no channel is found. Also guard the caller to safely handle this case.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
References
- NVD record
- CVE.org record
- https://git.kernel.org/stable/c/116d1f8805ae2daadbac89d24da4c0da50b9edae
- https://git.kernel.org/stable/c/1d24f14e049fdd769146dda026496ed23b397ed9
- https://git.kernel.org/stable/c/3c374d33f1338dbb5676919c5194caa9c5aa1631
- https://git.kernel.org/stable/c/947eb6f0a274f8b15a0248051a65b069effd5057
- https://git.kernel.org/stable/c/94d158985b6ea011bdc26186f42d662a156da6cb
- https://git.kernel.org/stable/c/9ac3675bf875792dced45efbf47116719a7c097b