CVE-2026-93038: iio: dac: ad5686: missing NULL check on match data

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-17 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: iio: dac: ad5686: missing NULL check on match data Verify that chip_info pointer is not NULL. If a user binds the driver using driver_override via sysfs with a device name not present in the id_table or of_match_table, match data will be NULL.

Affected products

Linux kernel: 7.2 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/572a008526359cdac2fa935dad75e9d50a79792f
https://git.kernel.org/stable/c/cdaa9cb77eb67f2d4921600f6531315040888e29

Get alerted when CVE-2026-93038 or the next vulnerability affects your stack