CVE-2026-46282 Details
Description
In the Linux kernel, the following vulnerability has been resolved: iio: frequency: admv1013: fix NULL pointer dereference on str When device_property_read_string() fails, str is left uninitialized but the code falls through to strcmp(str, ...), dereferencing a garbage pointer. Replace manual read/strcmp with device_property_match_property_string() and consolidate the SE mode enums into a single sequential enum, mapping to hardware register values via a switch consistent with other bitfields in the driver. Several cleanup patches have been applied to this driver recently so this will need a manual backport.
A NULL pointer dereference vulnerability has been identified in the Linux kernel ADMV1013 driver. When the function 'device_property_read_string()' fails, the string variable 'str' remains uninitialized. The code then proceeds to compare 'str' using 'strcmp()', which leads to dereferencing a garbage pointer. This vulnerability has been addressed by replacing the manual string read and comparison with 'device_property_match_property_string()'. Additionally, the single-ended mode enums have been consolidated into a sequential enum, mapping to hardware register values via a switch, in line with other bitfields in the driver. This issue affects the Linux kernel IIO frequency ADMV1013 driver.
The vulnerability has been fixed in the Linux kernel stable tree. Users can apply the latest patches available in the stable release to address this issue.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/2dc8d26690bf4e7226409563221c37bc095c94ff | kernel.org | Patch |
| https://git.kernel.org/stable/c/3a9d8ec2051c2d80158ed7bded5e158c42870037 | kernel.org | Patch |
| https://git.kernel.org/stable/c/5e9f1bad26df3d3afb3cbbfa408b6d6e809708ac | kernel.org | Patch |
| https://git.kernel.org/stable/c/aac0a51b16700b403a55b67ba495de021db78763 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.17, < 6.12.86 >= 6.13, < 6.18.27 >= 6.19, < 7.0.4 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 23, 2026 | CVE Translated | [email protected] |
| Jul 8, 2026 | Initial Analysis | [email protected] |
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 8, 2026 | New CVE Received | kernel.org |