CVE-2026-53386
HIGHiio: adc: ti-ads1298: add bounds check to pga_settings index
Title source: cnaDescription
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: add bounds check to pga_settings index ads1298_pga_settings has 7 elements but ADS1298_MASK_CH_PGA can yield values 0-7. If it yields a value >= 7, this causes an out-of-bounds array access. Add a bounds check and return -EINVAL if the index is out of range. Note that the remaining value b111 is reserved so should not be seen in a correctly functioning system.
References (5)
Core 5
Core References
Scores
CVSS v3
7.8
EPSS
0.0013
EPSS Percentile
2.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-129
Status
published
Products (27)
linux/Kernel
< 6.12.95linux
linux/Kernel
6.13.0 - 6.18.37linux
linux/Kernel
6.19.0 - 7.0.14linux
linux/Kernel
6.9.0 - 6.12.95linux
linux/Kernel
7.1.0 - 7.1.2linux
Linux/Linux
< 6.12.95
Linux/Linux
< 6.18.37
Linux/Linux
< 6.9
Linux/Linux
< 7.0.14
Linux/Linux
< 7.1.2
... and 17 more
Published
Jul 19, 2026
Tracked Since
Jul 19, 2026