CVE-2024-56557

iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer

State: Published
Severity: 7.8 High
Published: Dec 27, 2024
Updated: Aug 5, 2026
Reserved: Dec 27, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer

The AD7923 was updated to support devices with 8 channels, but the size of tx_buf and ring_xfer was not increased accordingly, leading to a potential buffer overflow in ad7923_update_scan_mode().

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected Products

Product	Versions
LinuxLinux	851644a60d200c9a294de5a5594004bcf13d34c7 to before 6e4d236d9c4b38571c394d3ab6e85dfb71c33ed3Affected 851644a60d200c9a294de5a5594004bcf13d34c7 to before 00663d3e000c31d0d49ef86a809f5c107c2d09cdAffected 851644a60d200c9a294de5a5594004bcf13d34c7 to before e5cac32721997cb8bcb208a29f4598b3faf46338Affected 851644a60d200c9a294de5a5594004bcf13d34c7 to before 218ecc35949129171ca39bcc0d407c8dc4cd0bbcAffected 851644a60d200c9a294de5a5594004bcf13d34c7 to before 3a4187ec454e19903fd15f6e1825a4b84e59a4cdAffected
LinuxLinux	5.6Affected before 5.6Not affected 5.15.203 through 5.15.Not affected 6.1.120 through 6.1.Not affected 6.6.64 through 6.6.Not affected 6.12.4 through 6.12.Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

851644a60d200c9a294de5a5594004bcf13d34c7 to before 6e4d236d9c4b38571c394d3ab6e85dfb71c33ed3Affected
851644a60d200c9a294de5a5594004bcf13d34c7 to before 00663d3e000c31d0d49ef86a809f5c107c2d09cdAffected
851644a60d200c9a294de5a5594004bcf13d34c7 to before e5cac32721997cb8bcb208a29f4598b3faf46338Affected
851644a60d200c9a294de5a5594004bcf13d34c7 to before 218ecc35949129171ca39bcc0d407c8dc4cd0bbcAffected
851644a60d200c9a294de5a5594004bcf13d34c7 to before 3a4187ec454e19903fd15f6e1825a4b84e59a4cdAffected

LinuxLinux

5.6Affected
before 5.6Not affected
5.15.203 through 5.15.*Not affected
6.1.120 through 6.1.*Not affected
6.6.64 through 6.6.*Not affected
6.12.4 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.