The kernel driver for the admv1013 IIO device performs a string comparison on a pointer that may not be initialized. When device_property_read_string() fails, the pointer remains unset and the code falls through to a strcmp call, dereferencing a null or garbage pointer and causing a kernel fault that brings the system down.

All Linux kernels with the admv1013 driver could be vulnerable. No specific version range is provided; any kernel that has not incorporated the recent patches may still contain the flaw.

The fault results in a kernel crash, leading to denial of service. The CVSS score of 5.5 indicates moderate severity, and the EPSS score of < 1% shows a very low probability of exploitation. The issue is not listed in CISA KEV. Based on the description, the fault is triggered during a device property read, so a local user with access to the admv1013 IIO device could potentially trigger the crash. No public exploitation has been reported.