---
id: CVE-2026-31768
title: 'iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()

  Add a DMA-safe buffer and use it for spi_read() instead of a stack
  memory. All SPI buffers must be DMA-safe…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 4d671b71beefbfc145b971a11e0c3cabde94b673 <
    b3bb8faeca1a2ef7be95ee8a512b639f9ffce947
  - >-
    Linux >= 4d671b71beefbfc145b971a11e0c3cabde94b673 <
    fa64aab25aba47296aa8d12bb4c88ec3fecb2054
  - >-
    Linux >= 4d671b71beefbfc145b971a11e0c3cabde94b673 <
    67b3a91bdc48220bfb67155ab528121b9c822782
  - >-
    Linux >= 4d671b71beefbfc145b971a11e0c3cabde94b673 <
    014c6d27878d3883f7bb065610768fd021de1a96
  - >-
    Linux >= 4d671b71beefbfc145b971a11e0c3cabde94b673 <
    d2d031b0786ea66ab0577c9d2d71435068d32199
  - >-
    Linux >= 4d671b71beefbfc145b971a11e0c3cabde94b673 <
    768461517a28d80fe81ea4d5d03a90cd184ea6ad
  - Linux 4.9
published: '2026-05-01'
updated: '2026-09-08'
sourceUpdated: '2026-09-08T08:48:16.836Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-31768'
references:
  - url: 'https://git.kernel.org/stable/c/b3bb8faeca1a2ef7be95ee8a512b639f9ffce947'
  - url: 'https://git.kernel.org/stable/c/fa64aab25aba47296aa8d12bb4c88ec3fecb2054'
  - url: 'https://git.kernel.org/stable/c/67b3a91bdc48220bfb67155ab528121b9c822782'
  - url: 'https://git.kernel.org/stable/c/014c6d27878d3883f7bb065610768fd021de1a96'
  - url: 'https://git.kernel.org/stable/c/d2d031b0786ea66ab0577c9d2d71435068d32199'
  - url: 'https://git.kernel.org/stable/c/768461517a28d80fe81ea4d5d03a90cd184ea6ad'
tags:
  - cve.org
epss: 0.00176
epssPercentile: 0.06302
ingestedAt: '2026-09-08T15:33:26.989Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()

Add a DMA-safe buffer and use it for spi_read() instead of a stack
memory. All SPI buffers must be DMA-safe.

Since we only need up to 3 bytes, we just use a u8[] instead of __be16
and __be32 and change the conversion functions appropriately.

## Affected

- `Linux >= 4d671b71beefbfc145b971a11e0c3cabde94b673 < b3bb8faeca1a2ef7be95ee8a512b639f9ffce947`
- `Linux >= 4d671b71beefbfc145b971a11e0c3cabde94b673 < fa64aab25aba47296aa8d12bb4c88ec3fecb2054`
- `Linux >= 4d671b71beefbfc145b971a11e0c3cabde94b673 < 67b3a91bdc48220bfb67155ab528121b9c822782`
- `Linux >= 4d671b71beefbfc145b971a11e0c3cabde94b673 < 014c6d27878d3883f7bb065610768fd021de1a96`
- `Linux >= 4d671b71beefbfc145b971a11e0c3cabde94b673 < d2d031b0786ea66ab0577c9d2d71435068d32199`
- `Linux >= 4d671b71beefbfc145b971a11e0c3cabde94b673 < 768461517a28d80fe81ea4d5d03a90cd184ea6ad`
- `Linux 4.9`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.