CVE-2026-72480

A flaw was found in the Linux kernel's Industrial Input/Output (IIO) subsystem, specifically in the Xilinx Analog-to-Digital Converter (ADC) AMS driver. When handling events, the ams_event_to_channel() function could attempt to access memory outside of its allocated boundaries if a matching channel is not found. This out-of-bounds access can lead to system instability or a denial of service, making the system unresponsive.

A flaw was found in the Linux kernel's Industrial I/O (IIO) subsystem, in the Xilinx AMS analog-to-digital converter (ADC) driver. The ams_event_to_channel() function can return a pointer past the end of the dev->channels array when no channel matches a given scan_index, and ams_handle_event() then dereferences that out-of-bounds pointer while processing an ADC hardware event. This invalid kernel memory access can crash the kernel, resulting in a local denial of service on systems using the xilinx-ams driver. Red Hat rates this flaw as Moderate severity (CVSS 3.1 score 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) because exploitation requires a local actor on a system that uses the Xilinx AMS driver and the verified impact is limited to availability. The higher CVE.org score of 7.8 (Important) assumes high confidentiality and integrity impacts that the available evidence does not support. All Red Hat Enterprise Linux and Red Hat In-Vehicle OS kernel and kernel-rt streams are currently recorded as not affected by this flaw, with the recorded justification that the vulnerable code is not present in the shipped kernel versions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.