The Xilinx AMS Industrial I/O driver contains a flaw in the function that translates an event into a channel. When the event cannot be matched to a scan index, the function returns a pointer that lies past the end of the device’s channel array. The subsequent event handler then dereferences this invalid pointer, which can result in an out‑of‑bounds memory read or write that triggers a kernel Oops and potentially crashes the system. This constitutes a denial of service.

All Linux kernel installations that include the Xilinx AMS driver are affected. The driver is compiled into the kernel’s IIO subsystem and is enabled on a broad range of embedded boards, development kits, and FPGA platforms that integrate Xilinx’s Analog Mixed‑Signal controller. Any such system running a kernel version prior to the patch does not have the bounds check and is therefore at risk.

The CVSS score of 7.8 classifies this as a high severity vulnerability. The EPSS score of below 1% indicates that the probability of exploitation is currently low. The case is not listed in the CISA KEV catalog, further suggesting that no widespread exploitation is known. Based on the description, it is inferred that the attack vector is primarily local or privileged, requiring the ability to trigger events on the AMS device. If the device is exposed via a networked interface or an external driver that can be influenced by non‑privileged users, remote exploitation could be possible, but the low EPSS score and lack of KEV listing suggest the risk to availability is moderate with a low expectation of active attacks today.