CVE-2026-31768
Analyzed Analyzed - Analysis Complete
Buffer Overflow Fix in Linux Kernel IIO ADC Driver

Publication date: 2026-05-01

Last updated on: 2026-05-11

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() Add a DMA-safe buffer and use it for spi_read() instead of a stack memory. All SPI buffers must be DMA-safe. Since we only need up to 3 bytes, we just use a u8[] instead of __be16 and __be32 and change the conversion functions appropriately.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-01
Last Modified
2026-05-11
Generated
2026-06-16
AI Q&A
2026-05-01
EPSS Evaluated
2026-06-15
NVD
CVE-2026-31768
EUVD
EUVD-2026-26581
Affected Vendors & Products
Showing 11 associated CPEs
Vendor Product Version / Range
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel From 6.13 (inc) to 6.18.22 (exc)
linux linux_kernel From 6.19 (inc) to 6.19.12 (exc)
linux linux_kernel From 6.7 (inc) to 6.12.81 (exc)
linux linux_kernel From 6.2 (inc) to 6.6.134 (exc)
linux linux_kernel From 4.9 (inc) to 6.1.168 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability involves the Linux kernel's handling of SPI read operations in the ti-adc161s626 driver. Specifically, the driver was using stack memory for spi_read(), which is not safe for Direct Memory Access (DMA) operations. The fix involves adding a DMA-safe buffer and using it for spi_read() instead of stack memory, ensuring that all SPI buffers are DMA-safe.

Impact Analysis

Using stack memory for DMA operations can lead to undefined behavior, including data corruption or system instability. This vulnerability could potentially cause incorrect data to be read from the ADC device or cause kernel crashes, impacting system reliability and data integrity.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-31768. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart