CVE-2026-72480

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-72480
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72480.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-72480
Downstream
Published
2026-08-15T05:57:18Z
Modified
2026-08-18T03:56:26Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling
Details

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling

ams_event_to_channel() may return a pointer past the end of dev->channels when no matching scan_index is found. This can lead to invalid memory access in ams_handle_event().

Add a bounds check in ams_event_to_channel() and return NULL when no channel is found. Also guard the caller to safely handle this case.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72480.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d5c70627a79455154f5f636096abe6fe57510605
Fixed
116d1f8805ae2daadbac89d24da4c0da50b9edae
Fixed
94d158985b6ea011bdc26186f42d662a156da6cb
Fixed
1d24f14e049fdd769146dda026496ed23b397ed9
Fixed
9ac3675bf875792dced45efbf47116719a7c097b
Fixed
3c374d33f1338dbb5676919c5194caa9c5aa1631
Fixed
947eb6f0a274f8b15a0248051a65b069effd5057

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72480.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.17.0
Fixed
6.1.178
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.145
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.97
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72480.json"