The kernel driver for the admv1013 IIO device performs a string comparison on a pointer that may not be initialized. When device_property_read_string() fails, the pointer remains unset and the code falls through to a strcmp call, resulting in a NULL or garbage pointer dereference and a kernel fault that brings the system down.

All Linux kernels that include the admv1013 driver are potentially vulnerable. The product identifier lists the Linux kernel generically, and no specific version range is provided. Patches referenced in the advisory are recent, so any kernel that has not incorporated these fixes—whether from newer releases or custom builds—may still contain the flaw.

The flaw leads to denial of service through a kernel crash. Local access to the admv1013 device is required to trigger the fault, as the issue arises during a device property read operation. The EPSS score is not available, and the vulnerability is not listed in CISA's KEV catalog. Because the fault is a straightforward pointer dereference in privileged kernel code, the risk of exploitation is considered moderate to high when an attacker can interact with the device. The likely attack vector is local interaction with the admv1013 driver, inferred from the description of the fault being triggered during a property read. No public exploitation kit has been reported.