CVE-2025-38025: iio: adc: ad7606: check for NULL before calling sw_mode_config()
In the Linux kernel, the following vulnerability has been resolved:
iio: adc: ad7606: check for NULL before calling swmodeconfig()
Check that the swmodeconfig function pointer is not NULL before calling it. Not all buses define this callback, which resulted in a NULL pointer dereference.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In the Linux kernel iio: adc: ad7606 code, check that the sw_mode_config function pointer is not NULL before calling sw_mode_config().
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems using the Linux kernel AD7606 IIO ADC driver on a bus implementation that does not define the sw_mode_config callback are exposed to the NULL pointer dereference condition.
What does an attacker need to exploit it?
The supplied CVSS vector indicates local access and low privileges are required, with no user interaction required. Successful exploitation can cause a denial of service through high availability impact.
Is a patch available?
Yes. The issue has been resolved by adding a NULL check before sw_mode_config is called; the provided stable kernel references identify patches containing the fix.