In the Linux kernel, the following vulnerability has been resolved:
iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling
ams_event_to_channel() may return a pointer past the end of dev->channels when no matching scan_index is found. This can lead to invalid memory access in ams_handle_event().
Add a bounds check in ams_event_to_channel() and return NULL when no channel is found. Also guard the caller to safely handle this case.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Aug 16, 2026 | Aug 16, 2026 |
| Ubuntu | — | Upgrade linux-image-oracle-7.0Upgrade linux-image-realtime-7.0Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-7.0.0-38-realtimeUpgrade linux-image-7.0.0-1013-oracleUpgrade linux-image-azure-fde-lts-26.04Upgrade linux-image-gkeUpgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-1015-ibmUpgrade linux-image-virtualUpgrade linux-image-virtual-7.0Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-64k-7.0Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-realtime-64kUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-7.0.0-1014-awsUpgrade linux-image-realtimeUpgrade linux-image-azure-fde-7.0Upgrade linux-image-7.0.0-1014-aws-64kUpgrade linux-image-7.0.0-38-genericUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-azure-lts-26.04Upgrade linux-image-gcp-7.0Upgrade linux-image-7.0.0-1013-oracle-64kUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-7.0.0-1016-azure-fdeUpgrade linux-image-awsUpgrade linux-image-7.0.0-38-realtime-64kUpgrade linux-image-oracleUpgrade linux-image-7.0.0-1008-gke-64kUpgrade linux-image-gke-7.0Upgrade linux-image-ibm-7.0Upgrade linux-image-generic-64k-7.0Upgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-gke-64kUpgrade linux-image-genericUpgrade linux-image-7.0.0-1017-azureUpgrade linux-image-7.0.0-1015-oemUpgrade linux-image-generic-7.0Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-oem-26.04aUpgrade linux-image-oem-26.04Upgrade linux-image-gke-64k-7.0Upgrade linux-image-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-7.0.0-1014-gcpUpgrade linux-image-ibmUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-aws-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-azure-7.0Upgrade linux-image-6.8.0-1036-nvidia-tegraUpgrade linux-image-oem-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-7.0.0-1014-gcp-64kUpgrade linux-image-7.0.0-1008-gkeUpgrade linux-image-6.8.0-1036-nvidia-tegra-rtUpgrade linux-image-7.0.0-38-generic-64kUpgrade linux-image-gcp-64k | Oct 7, 2026 | Oct 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 21, 2026 | Aug 15, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub