{"id":"CVE-2026-93038","revision":"8fdf877578984673a061dd623d5015b6","records":[{"revision":"8fdf877578984673a061dd623d5015b6","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-93038","aliases":[],"title":"iio: dac: ad5686: missing NULL check on match data","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: dac: ad5686: missing NULL check on match data\n\nVerify that chip_info pointer is not NULL. If a user binds the driver\nusing driver_override via sysfs with a device name not present in the\nid_table or of_match_table, match data will be NULL.","state":0,"publishedAt":"2026-09-17T16:10:32.132+00:00","modifiedAt":"2026-10-19T09:04:33.325+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/iio/dac/ad5686-spi.c\",\n                        \"drivers/iio/dac/ad5696-i2c.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"0eb1728461a1a84613188f394e38921e29325d30\",\n                            \"lessThan\": \"cdaa9cb77eb67f2d4921600f6531315040888e29\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"0eb1728461a1a84613188f394e38921e29325d30\",\n                            \"lessThan\": \"572a008526359cdac2fa935dad75e9d50a79792f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/iio/dac/ad5686-spi.c\",\n                        \"drivers/iio/dac/ad5696-i2c.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"7.2\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"7.2\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.6\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/cdaa9cb77eb67f2d4921600f6531315040888e29","https://git.kernel.org/stable/c/572a008526359cdac2fa935dad75e9d50a79792f"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-93038","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-93038","identifiers":["CVE-2026-93038"]},"retained":false,"historicalAffected":[]}],"coverage":[]}