CVE-2026-53386: iio: adc: ti-ads1298: add bounds check to pga_settings index
In the Linux kernel, the following vulnerability has been resolved:
iio: adc: ti-ads1298: add bounds check to pgasettings index
ads1298pgasettings has 7 elements but ADS1298MASKCHPGA can yield values 0-7. If it yields a value >= 7, this causes an out-of-bounds array access. Add a bounds check and return -EINVAL if the index is out of range.
Note that the remaining value b111 is reserved so should not be seen in a correctly functioning system.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In ti-ads1298 PGA handling, add a bounds check for the ADS1298_MASK_CH_PGA-derived index into ads1298_pga_settings (7 elements). If the computed index is out of range (>= 7), do not access the array; instead return -EINVAL.
Linux kernel module iio: adc: ti-ads1298 pga_settings index bounds check = if index yields value >= 7 return -EINVAL
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53386?
CVE-2026-53386 has a severity rating of high, with a CVSS score of 7.8.
How do I fix CVE-2026-53386?
To fix CVE-2026-53386, ensure that you apply the latest patches provided by the Linux kernel maintainers.
What type of vulnerability is CVE-2026-53386?
CVE-2026-53386 is classified as an out-of-bounds read vulnerability in the Linux kernel.
Which software is affected by CVE-2026-53386?
CVE-2026-53386 affects the Linux kernel specifically related to the ti-ads1298 ADC driver.
When was CVE-2026-53386 published?
CVE-2026-53386 was published on July 19, 2026.