CVE-2026-72480
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
In the Linux kernel, the iio: adc xilinx-ams driver has an out-of-bounds read vulnerability in ams_event_to_channel(). The function may return a pointer past the end of dev->channels when no matching scan_index is found, leading to invalid memory access in ams_handle_event(). The fix adds a bounds check and returns NULL when no channel is found.
Risk Assessment
The vulnerability can lead to system crash or potentially be exploited to gain unauthorized memory access. It requires local access and the ability to trigger ADC events.
Recommendation
Apply the patch from the Linux kernel that adds a bounds check. Update the kernel to a patched version.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling ams_event_to_channel() may return a pointer past the end of dev->channels when no matching scan_index is found. This can lead to invalid memory access in ams_handle_event(). Add a bounds check in ams_event_to_channel() and return NULL when no channel is found. Also guard the caller to safely handle this case.