CVE-2026-46282: iio: frequency: admv1013: fix NULL pointer dereference on str
In the Linux kernel, the following vulnerability has been resolved:
iio: frequency: admv1013: fix NULL pointer dereference on str
When devicepropertyreadstring() fails, str is left uninitialized but the code falls through to strcmp(str, ...), dereferencing a garbage pointer. Replace manual read/strcmp with devicepropertymatchpropertystring() and consolidate the SE mode enums into a single sequential enum, mapping to hardware register values via a switch consistent with other bitfields in the driver.
Several cleanup patches have been applied to this driver recently so this will need a manual backport.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel iio: frequency: admv1013to a version that resolves this vulnerability.Patch iio: frequency: admv1013: fix NULL pointer dereference on str
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46282?
The severity of CVE-2026-46282 is rated as 27.
How do I fix CVE-2026-46282?
To fix CVE-2026-46282, update the Linux kernel to the latest version that addresses the NULL pointer dereference vulnerability.
What systems are affected by CVE-2026-46282?
CVE-2026-46282 affects the Linux kernel iio admv1013 driver.
What type of vulnerability is CVE-2026-46282?
CVE-2026-46282 is classified as a Null Pointer Dereference vulnerability.
When was CVE-2026-46282 published?
CVE-2026-46282 was published on June 8, 2026.