CVE-2024-56557

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer

The AD7923 was updated to support devices with 8 channels, but the size of tx_buf and ring_xfer was not increased accordingly, leading to a potential buffer overflow in ad7923_update_scan_mode().

This vulnerability is rated as Moderate impact for Red Hat products because triggering it requires local access and specialized Industrial I/O hardware, limiting the blast radius to local system availability. Standard Red Hat Enterprise Linux kernels do not enable the AD7923 ADC driver by default, substantially reducing exposure across typical enterprise installations. In environments where custom configurations enable this driver, an attacker with local privileges would need to interact with the device's scanning configuration to trigger memory corruption.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.