Executive brief
A vulnerability was identified in the Linux kernel's driver for the ADMV1013 microwave upconverter. If the system fails to read certain device configuration properties, it could attempt to access an invalid memory location, potentially causing a system crash or instability. This primarily affects specialized hardware environments using this specific frequency converter component.
Technical details
A vulnerability exists in the admv1013_properties_parse function within drivers/iio/frequency/admv1013.c. When device_property_read_string() fails to read 'adi,input-mode' or 'adi,quad-se-mode', the 'str' pointer remains uninitialized. The code subsequently passes this uninitialized pointer to strcmp(), resulting in a NULL pointer (or garbage pointer) dereference. An attacker with the ability to influence device tree properties or trigger specific hardware initialization failures could cause a kernel oops. The fix replaces manual string comparison with device_property_match_property_string() to safely handle missing or invalid properties.
Affected products
- Linux Linux Kernel admv1013 driver
Timeline
- 2026-05-07: patched: Patch committed to stable tree
- 2026-06-08: disclosed: CVE published