CVE-2025-38547
kernel: iio: adc: axp20x_adc: Add missing sentinel to AXP717 ADC channel maps
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · August 16, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
iio: adc: axp20x_adc: Add missing sentinel to AXP717 ADC channel maps
The AXP717 ADC channel maps is missing a sentinel entry at the end. This causes a KASAN warning.
Add the missing sentinel entry.
Statement
This vulnerability does not affect Red Hat Enterprise Linux as the vulnerable AXP717 ADC driver code is not present in supported kernel packages. The flaw stems from an out-of-bounds read caused by a missing termination sentinel in channel mappings for specialized PMIC hardware. Exploitation would require a system equipped with this specific hardware, presenting no practical risk to enterprise deployments.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified