Out-of-Bounds Access Vulnerability in Linux Kernel AD7173 Module

CVE-2025-39786

What is CVE-2025-39786?

This vulnerability in the Linux kernel's AD7173 module arises from incorrect handling of channel indexing during access to the syscalib_mode attribute. The flaw exists because the address field uses a 0-based index, while the channels field may vary based on the device tree's channel configuration. As a result, this mismatch can lead to out-of-bounds access, potentially compromising system integrity and security.

References