CVE-2026-53386

iio: adc: ti-ads1298: add bounds check to pga_settings index

State: Published
Severity: 7.8 High
Published: Jul 19, 2026
Updated: Aug 17, 2026
Reserved: Jun 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: ti-ads1298: add bounds check to pga_settings index

ads1298_pga_settings has 7 elements but ADS1298_MASK_CH_PGA can yield values 0-7. If it yields a value >= 7, this causes an out-of-bounds array access. Add a bounds check and return -EINVAL if the index is out of range.

Note that the remaining value b111 is reserved so should not be seen in a correctly functioning system.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	00ef7708fa6073a84f6898fdcdfe965d903b0378 to before d5793975fc3b1780ba576812158ef22e3104e60eAffected 00ef7708fa6073a84f6898fdcdfe965d903b0378 to before d08d82d83ed45fd8c001a9df66ad7ebb86c9d6c6Affected 00ef7708fa6073a84f6898fdcdfe965d903b0378 to before abe0854e356b1bb814393ca884cb42b3eb12ce10Affected 00ef7708fa6073a84f6898fdcdfe965d903b0378 to before abd776ded3e256889610595290f6ca46cb6e91abAffected 00ef7708fa6073a84f6898fdcdfe965d903b0378 to before 95e8a48d7a85d4226934020e57815a3316d3a14bAffected
LinuxLinux	6.9Affected before 6.9Not affected 6.12.95 through 6.12.Not affected 6.18.37 through 6.18.Not affected 7.0.14 through 7.0.Not affected 7.1.2 through 7.1.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

00ef7708fa6073a84f6898fdcdfe965d903b0378 to before d5793975fc3b1780ba576812158ef22e3104e60eAffected
00ef7708fa6073a84f6898fdcdfe965d903b0378 to before d08d82d83ed45fd8c001a9df66ad7ebb86c9d6c6Affected
00ef7708fa6073a84f6898fdcdfe965d903b0378 to before abe0854e356b1bb814393ca884cb42b3eb12ce10Affected
00ef7708fa6073a84f6898fdcdfe965d903b0378 to before abd776ded3e256889610595290f6ca46cb6e91abAffected
00ef7708fa6073a84f6898fdcdfe965d903b0378 to before 95e8a48d7a85d4226934020e57815a3316d3a14bAffected

LinuxLinux

6.9Affected
before 6.9Not affected
6.12.95 through 6.12.*Not affected
6.18.37 through 6.18.*Not affected
7.0.14 through 7.0.*Not affected
7.1.2 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.