CVE-2026-72480

iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling

State: Published
Severity: 7.8 High
Published: Aug 15, 2026
Updated: Aug 17, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling

ams_event_to_channel() may return a pointer past the end of dev->channels when no matching scan_index is found. This can lead to invalid memory access in ams_handle_event().

Add a bounds check in ams_event_to_channel() and return NULL when no channel is found. Also guard the caller to safely handle this case.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	d5c70627a79455154f5f636096abe6fe57510605 to before 116d1f8805ae2daadbac89d24da4c0da50b9edaeAffected d5c70627a79455154f5f636096abe6fe57510605 to before 94d158985b6ea011bdc26186f42d662a156da6cbAffected d5c70627a79455154f5f636096abe6fe57510605 to before 1d24f14e049fdd769146dda026496ed23b397ed9Affected d5c70627a79455154f5f636096abe6fe57510605 to before 9ac3675bf875792dced45efbf47116719a7c097bAffected d5c70627a79455154f5f636096abe6fe57510605 to before 3c374d33f1338dbb5676919c5194caa9c5aa1631Affected d5c70627a79455154f5f636096abe6fe57510605 to before 947eb6f0a274f8b15a0248051a65b069effd5057Affected
LinuxLinux	5.17Affected before 5.17Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

d5c70627a79455154f5f636096abe6fe57510605 to before 116d1f8805ae2daadbac89d24da4c0da50b9edaeAffected
d5c70627a79455154f5f636096abe6fe57510605 to before 94d158985b6ea011bdc26186f42d662a156da6cbAffected
d5c70627a79455154f5f636096abe6fe57510605 to before 1d24f14e049fdd769146dda026496ed23b397ed9Affected
d5c70627a79455154f5f636096abe6fe57510605 to before 9ac3675bf875792dced45efbf47116719a7c097bAffected
d5c70627a79455154f5f636096abe6fe57510605 to before 3c374d33f1338dbb5676919c5194caa9c5aa1631Affected
d5c70627a79455154f5f636096abe6fe57510605 to before 947eb6f0a274f8b15a0248051a65b069effd5057Affected

LinuxLinux

5.17Affected
before 5.17Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.