Critical Vulnerability in Linux Package: Missing Sentinel in AXP717 ADC Channel Maps
Summary
DEBIAN-CVE-2025-38547: In the Linux kernel, the following vulnerability has been resolved: iio: adc: axp20x_adc: Add missing sentinel to AXP717 ADC channel maps The AXP717 ADC channel maps is missing a sentinel entry at the end. Affects linux versions < 6.12.41-1. Fixed in 6.12.41-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of the operating system that manages hardware and software resources. It provides essential services for all other parts of the operating system and is responsible for managing system resources, including memory, processes, and device drivers. The vulnerability in question affects the AXP717 ADC channel maps, which are crucial for analog-to-digital conversion in various hardware components. This issue can lead to system instability and warnings during operation.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the AXP717 ADC channel maps due to a missing sentinel entry at the end of the channel maps. This omission can trigger a Kernel Address Sanitizer (KASAN) warning, indicating potential memory corruption or access violations. The absence of this sentinel can lead to undefined behavior in the kernel, which may compromise system stability and security.
How To Fix
Minimum fixed version
6.12.41-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is advisable to apply the patch as soon as it is available to mitigate any potential risks.
Conclusion
The identified vulnerability in the Linux kernel regarding the missing sentinel in the AXP717 ADC channel maps poses a risk to system stability and security. It is crucial to update to the patched versions provided for Debian 13 and 14 to mitigate these risks. Regular updates and monitoring using tools like Vulert can help maintain system integrity.
See every vulnerability recorded for linux →
FAQ
The impact includes potential system instability and warnings during operation, which may lead to undefined behavior in the kernel.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without any signup.
A sentinel is a special value used to indicate the end of a data structure, such as an array. Its absence can lead to memory access issues.
While the primary concern is system stability, undefined behavior could potentially lead to data corruption or loss in extreme cases.
It is recommended to regularly check for updates and apply them promptly to ensure your system is secure and stable.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
