Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's IIO ADC AD4851 driver has been addressed. The issue arose in the AD4858 channel pointer handling, where the pointer returned from the channel parsing function was improperly incremented. This mismanagement caused the channel pointer to exceed the bounds of the allocated array, leading to potential memory corruption or undefined behavior. The vulnerability has been fixed by modifying the channel iteration to use an explicit index, ensuring that the original pointer base is preserved and all channel metadata is accurately set.
The vulnerability could have led to memory corruption or undefined behavior due to the channel pointer being set beyond the allocated array's end.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.