CVE-2026-98674: iio: adc: adi-axi-adc: Initialize state mutex
In the Linux kernel, the following vulnerability has been resolved:
iio: adc: adi-axi-adc: Initialize state mutex
The AXI ADC register access paths serialize transactions with st->lock, but probe does not initialize it. Initialize the mutex before registering the backend.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.12.117 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.18.56 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 7.2.10 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 7.2.10-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 7.2.15-1Fixed in 7.3.3-1
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
Systems using the Linux kernel AXI ADC driver affected by this change are exposed when its register access paths use the uninitialized state mutex. The provided data does not identify specific kernel versions or hardware platforms.
What configuration condition is required for the issue to occur?
The affected AXI ADC backend must be registered and its register access paths invoked. The issue is caused by probe failing to initialize the driver's state mutex before backend registration.
What is the remediation?
Apply a Linux kernel update containing the fix that initializes the state mutex before registering the backend. The supplied references point to stable-kernel commits carrying the correction.