iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.24 % · percentile 16 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Deferred
Description
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ina2xx: avoid NULL pointer dereference on OF device match The affected lines were resulting in a NULL pointer dereference on our platform because the device tree contained the following list of compatible strings: power-sensor@40 { compatible = "ti,ina232", "ti,ina231"; ... }; Since the driver doesn't declare a compatible string "ti,ina232", the OF matching succeeds on "ti,ina231". But the I2C device ID info is populated via the first compatible string, cf. modalias population in of_i2c_get_board_info(). Since there is no "ina232" entry in the legacy I2C device ID table either, the struct i2c_device_id *id pointer in the probe function is NULL. Fix this by using the already populated type variable instead, which points to the proper driver data. Since the name is also wanted, add a generic one to the ina2xx_config table.
References
European references
- ENISA EUVD · EUVD-2023-60162
- GCVE · GCVE-0-2023-53834
CERT-FR advisories
- CERTFR-2026-AVI-0369 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0247 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0170 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected c43a102e67db99c8bfe6e8a9280cec13ff53b789 < a8e2ae6296d56478fb98ae7f739846ed121f154f ; affected c43a102e67db99c8bfe6e8a9280cec13ff53b789 < 77b689cc27d489b75d33f1a368356d70eb0ce08c ; affected c43a102e67db99c8bfe6e8a9280cec13ff53b789 < 13f3ce53b65aa8b44cad7039d31e62c9ffd6c5d1 ; affected c43a102e67db99c8bfe6e8a9280cec13ff53b789 < a41e19cc0d6b6a445a4133170b90271e4a2553dc |
| Linux · Linux | affected 4.5 ; unaffected 0 < 4.5 ; unaffected 5.15.127 ≤ 5.15.* ; unaffected 6.1.46 ≤ 6.1.* ; unaffected 6.4.11 ≤ 6.4.* ; unaffected 6.5 ≤ * |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |