AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-72480

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of event processing in the Xilinx AMS driver, specifically in the ams_event_to_channel() function, which may return a pointer beyond the allocated memory for device channels if a matching scan_index is not found. This can result in invalid memory access during event handling, potentially leading to system instability or crashes. Organizations utilizing Linux systems with the Xilinx AMS driver should prioritize applying the patch to mitigate risks associated with this memory access issue.

CVE
CVE-2026-72480
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling ams_event_to_channel() may return a pointer past the end of dev->channels when no matching scan_index is found. This can lead to invalid memory access in ams_handle_event(). Add a bounds check in ams_event_to_channel() and return NULL when no channel is found. Also guard the caller to safely handle this case.