The issue lies in the Linux kernel's Industrial I/O (IIO) ADC Xilinx AMS driver. During event handling, the function ams_event_to_channel() can return a pointer that points beyond the end of the dev->channels array when it cannot find a matching scan_index. This loss of bounds validation allows an out-of-bounds read in ams_handle_event(), which may cause a kernel crash or expose sensitive memory content. The flaw is a classic out-of-bounds memory access, corresponding to CWE-788 and CWE-125. An attacker with access to the affected device could trigger this error and potentially deny service to the system.

Any system running a Linux kernel that includes the IIO ADC Xilinx AMS driver may be affected. No specific kernel versions are listed; the vulnerability was present before the patches in the referenced commits but has since been fixed.

The vulnerability is a memory-access error that can lead to a kernel crash, yielding a denial of service. An exploit would likely require the ability to generate events for an Xilinx AMS device, which could be local or possible over a network if the device is exposed. No exploits have been documented, and the CVE is not currently listed in the CISA KEV catalog. The EPSS score is unavailable, so the typical exploitation probability is unclear, but the lack of known public exploits suggests a low to moderate risk level. Administrators should treat it as a potential local privilege escalation risk for systems with this driver active.