CVE-2022-49792
iio: adc: mp2629: fix potential array out of bound access
HIGH
7.1
CVSS Score
Published: May 1, 2025 at 02:09 PM UTC
Updated: August 5, 2026 at 09:24 AM UTC
1 product affected across 1 vendorLinux Kernel
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.1
Exploit prediction
EPSS 0.2%
Description
In the Linux kernel, the following vulnerability has been resolved: iio: adc: mp2629: fix potential array out of bound access Add sentinel at end of maps to avoid potential array out of bound access in iio core.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
5.11 ≤ v < 5.15.805.16 ≤ v < 6.0.105.8 ≤ v < 5.10.1565.8 ≤ v < 5.15.805.8 ≤ v < 6.0.105.8 ≤ v < 6.16.1 rc16.1 rc26.1 rc36.1 rc46.1 rc57abd9fb6468225f5c7f83149ce279cc1a912a68a
Vendor states this is fixed in 1678d4abb2dc2ca3b05b998a9d88616976e4f947 (fixed)
Vendor states this is fixed in 399b2105a2240e730b9f3880bd8f154247539aa7 (fixed)
Vendor states this is fixed in ca1547ab15f48dc81624183ae17a2fd1bad06dfc (fixed)
Vendor states this is fixed in d95b85c5084ad70011988861ee864529eefa1da0 (fixed)
Vendor states this is fixed in 5.10.156 (unaffected)
Vendor states this is fixed in 5.15.80 (unaffected)
Vendor states this is fixed in 5.8 (unaffected)
Vendor states this is fixed in 6.0.10 (unaffected)
Vendor states this is fixed in 6.1 (unaffected)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (4)
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/1678d4abb2dc2ca3b05b998a9d88616976e4f947Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/399b2105a2240e730b9f3880bd8f154247539aa7Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/ca1547ab15f48dc81624183ae17a2fd1bad06dfcPatch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/d95b85c5084ad70011988861ee864529eefa1da0CVSS
- Attack Vector
- LOCAL
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- HIGH
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusMODIFIED
CWE
CWE-125
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card