The adis16480 IIO driver in the Linux kernel creates two debugfs entries, firmware_revision and firmware_date, using an unsafe construction that bypasses the proper synchronization helper. Because the driver does not wait for ongoing reads before freeing the device structure during unbind, a user able to read the debugfs files can access stale or internal driver memory. This flaw permits the leakage of sensitive data such as firmware identifiers and timestamps, representing a classic information‑exposure vulnerability without any code‑execution or privilege‑escalation capabilities.

All Linux kernel builds containing the adis16480 IIO driver that have not integrated the recent fix are affected. Since no specific kernel version is listed, any kernel that includes this driver prior to the patch is vulnerable, regardless of overall kernel release level.

The CVSS score of 4.1 indicates moderate severity, and the EPSS score of less than 1 % reflects a low probability of exploitation. The flaw is not listed in CISA’s KEV catalog, further implying limited real‑world exploitation. The likely attack vector is a local user with read access to the system debugfs filesystem; the impact is limited to confidentiality loss through leaked internal state, requiring access to the debugfs interface and no elevated privileges.