CVE-2026-53386

HIGH

iio: adc: ti-ads1298: add bounds check to pga_settings index

Title source: cna
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: add bounds check to pga_settings index ads1298_pga_settings has 7 elements but ADS1298_MASK_CH_PGA can yield values 0-7. If it yields a value >= 7, this causes an out-of-bounds array access. Add a bounds check and return -EINVAL if the index is out of range. Note that the remaining value b111 is reserved so should not be seen in a correctly functioning system.

Scores

CVSS v3 7.8
EPSS 0.0013
EPSS Percentile 2.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-129
Status published
Products (27)
linux/Kernel < 6.12.95linux
linux/Kernel 6.13.0 - 6.18.37linux
linux/Kernel 6.19.0 - 7.0.14linux
linux/Kernel 6.9.0 - 6.12.95linux
linux/Kernel 7.1.0 - 7.1.2linux
Linux/Linux < 6.12.95
Linux/Linux < 6.18.37
Linux/Linux < 6.9
Linux/Linux < 7.0.14
Linux/Linux < 7.1.2
... and 17 more
Published Jul 19, 2026
Tracked Since Jul 19, 2026