{"id":"CVE-2026-31768","title":"iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: ti-adc161s626: use DMA-safe memory for spi_read()\n\nAdd a DMA-safe buffer and use it for spi_read() instead of a stack\nmemory. All SPI buffers must be DMA-safe…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= 4d671b71beefbfc145b971a11e0c3cabde94b673 < b3bb8faeca1a2ef7be95ee8a512b639f9ffce947","Linux >= 4d671b71beefbfc145b971a11e0c3cabde94b673 < fa64aab25aba47296aa8d12bb4c88ec3fecb2054","Linux >= 4d671b71beefbfc145b971a11e0c3cabde94b673 < 67b3a91bdc48220bfb67155ab528121b9c822782","Linux >= 4d671b71beefbfc145b971a11e0c3cabde94b673 < 014c6d27878d3883f7bb065610768fd021de1a96","Linux >= 4d671b71beefbfc145b971a11e0c3cabde94b673 < d2d031b0786ea66ab0577c9d2d71435068d32199","Linux >= 4d671b71beefbfc145b971a11e0c3cabde94b673 < 768461517a28d80fe81ea4d5d03a90cd184ea6ad","Linux 4.9"],"published":"2026-05-01","updated":"2026-09-08","sourceUpdated":"2026-09-08T08:48:16.836Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-31768","references":[{"url":"https://git.kernel.org/stable/c/b3bb8faeca1a2ef7be95ee8a512b639f9ffce947"},{"url":"https://git.kernel.org/stable/c/fa64aab25aba47296aa8d12bb4c88ec3fecb2054"},{"url":"https://git.kernel.org/stable/c/67b3a91bdc48220bfb67155ab528121b9c822782"},{"url":"https://git.kernel.org/stable/c/014c6d27878d3883f7bb065610768fd021de1a96"},{"url":"https://git.kernel.org/stable/c/d2d031b0786ea66ab0577c9d2d71435068d32199"},{"url":"https://git.kernel.org/stable/c/768461517a28d80fe81ea4d5d03a90cd184ea6ad"}],"tags":["cve.org"],"epss":0.00129,"epssPercentile":0.0294,"ingestedAt":"2026-09-08T15:33:26.989Z","slug":"CVE-2026-31768","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: ti-adc161s626: use DMA-safe memory for spi_read()\n\nAdd a DMA-safe buffer and use it for spi_read() instead of a stack\nmemory. All SPI buffers must be DMA-safe.\n\nSince we only need up to 3 bytes, we just use a u8[] instead of __be16\nand __be32 and change the conversion functions appropriately.\n\n## Affected\n\n- `Linux >= 4d671b71beefbfc145b971a11e0c3cabde94b673 < b3bb8faeca1a2ef7be95ee8a512b639f9ffce947`\n- `Linux >= 4d671b71beefbfc145b971a11e0c3cabde94b673 < fa64aab25aba47296aa8d12bb4c88ec3fecb2054`\n- `Linux >= 4d671b71beefbfc145b971a11e0c3cabde94b673 < 67b3a91bdc48220bfb67155ab528121b9c822782`\n- `Linux >= 4d671b71beefbfc145b971a11e0c3cabde94b673 < 014c6d27878d3883f7bb065610768fd021de1a96`\n- `Linux >= 4d671b71beefbfc145b971a11e0c3cabde94b673 < d2d031b0786ea66ab0577c9d2d71435068d32199`\n- `Linux >= 4d671b71beefbfc145b971a11e0c3cabde94b673 < 768461517a28d80fe81ea4d5d03a90cd184ea6ad`\n- `Linux 4.9`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}