CVE-2026-93038: iio: dac: ad5686: missing NULL check on match data
In the Linux kernel, the following vulnerability has been resolved:
iio: dac: ad5686: missing NULL check on match data
Verify that chipinfo pointer is not NULL. If a user binds the driver using driveroverride via sysfs with a device name not present in the idtable or ofmatchtable, match data will be NULL.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Systems using the Linux kernel ad5686 IIO DAC driver are exposed if a user can bind that driver through the driver_override sysfs interface to a device name that is absent from both the driver's id_table and of_match_table.
What is required to trigger the vulnerability?
An attacker or local user needs the ability to use driver_override via sysfs and bind the driver with an unrecognized device name. Under those conditions, the driver's match data is NULL.
How can I determine whether a system is affected?
Check whether the ad5686 driver is in use and whether driver_override can be used to bind it to device names not listed in its id_table or of_match_table. The vulnerable condition occurs when such a binding causes chip_info match data to be NULL.