CVE-2026-72480
High
Description
In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling ams_event_to_channel() may return a pointer past the end of dev->channels when no matching scan_index is found. This can lead to invalid memory access in ams_handle_event(). Add a bounds check in ams_event_to_channel() and return NULL when no channel is found. Also guard the caller to safely handle this case.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedAug 15, 2026
First seenAug 15, 2026
How to fix
Update
- Linux Linux116d1f8805ae2daadbac89d24da4c0da50b9edae, 94d158985b6ea011bdc26186f42d662a156da6cb, 1d24f14e049fdd769146dda026496ed23b397ed9, 9ac3675bf875792dced45efbf47116719a7c097b, 3c374d33f1338dbb5676919c5194caa9c5aa1631, 947eb6f0a274f8b15a0248051a65b069effd5057 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | d5c70627a79455154f5f636096abe6fe57510605 ≤ v < 116d1f8805ae2daadbac89d24da4c0da50b9edae, d5c70627a79455154f5f636096abe6fe57510605 ≤ v < 94d158985b6ea011bdc26186f42d662a156da6cb, d5c70627a79455154f5f636096abe6fe57510605 ≤ v < 1d24f14e049fdd769146dda026496ed23b397ed9, d5c70627a79455154f5f636096abe6fe57510605 ≤ v < 9ac3675bf875792dced45efbf47116719a7c097b, d5c70627a79455154f5f636096abe6fe57510605 ≤ v < 3c374d33f1338dbb5676919c5194caa9c5aa1631, d5c70627a79455154f5f636096abe6fe57510605 ≤ v < 947eb6f0a274f8b15a0248051a65b069effd5057, 5.17 | 116d1f8805ae2daadbac89d24da4c0da50b9edae, 94d158985b6ea011bdc26186f42d662a156da6cb, 1d24f14e049fdd769146dda026496ed23b397ed9, 9ac3675bf875792dced45efbf47116719a7c097b, 3c374d33f1338dbb5676919c5194caa9c5aa1631, 947eb6f0a274f8b15a0248051a65b069effd5057 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.