Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-46282

iio: frequency: admv1013: fix NULL pointer dereference on str

Description

In the Linux kernel, the following vulnerability has been resolved: iio: frequency: admv1013: fix NULL pointer dereference on str When device_property_read_string() fails, str is left uninitialized but the code falls through to strcmp(str, ...), dereferencing a garbage pointer. Replace manual read/strcmp with device_property_match_property_string() and consolidate the SE mode enums into a single sequential enum, mapping to hardware register values via a switch consistent with other bitfields in the driver. Several cleanup patches have been applied to this driver recently so this will need a manual backport.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • da35a7b526d9b258a2cb8b7816f736a41b32176b to < ef8b71a0fc692f8cb7f124a8143b540446b1fe9daffected
  • da35a7b526d9b258a2cb8b7816f736a41b32176b to < 3a9d8ec2051c2d80158ed7bded5e158c42870037affected
  • da35a7b526d9b258a2cb8b7816f736a41b32176b to < 5e9f1bad26df3d3afb3cbbfa408b6d6e809708acaffected
  • da35a7b526d9b258a2cb8b7816f736a41b32176b to < 2dc8d26690bf4e7226409563221c37bc095c94ffaffected
  • da35a7b526d9b258a2cb8b7816f736a41b32176b to < aac0a51b16700b403a55b67ba495de021db78763affected

Linux Linux

Default version status: affected

  • 5.17affected
  • 0 to < 5.17unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.86 to ≤ 6.12.*unaffected
  • 6.18.27 to ≤ 6.18.*unaffected
  • 7.0.4 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References