CVE-2026-64502

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ad sigma delta clear pending event() function where it incorrectly falls through to the status register read path for devices that have has registers set to false and no rdy gpiod. In these cases, the ad sd read reg() function skips the address byte and clocks raw MISO bytes, which can partially consume pending conversion results and corrupt the data stream for subsequent ad sd read reg() calls in ad sigma delta single conversion().

Additionally, if num resetclks is 0, the data read len variable evaluates to 0. If the clocked byte has bit 7 clear, the pending event is set, leading the code to execute a memset() operation with a length of -1. This causes an integer overflow to SIZE MAX, resulting in heap corruption. This heap corruption can also occur on any device where rdy gpiod is set but num resetclks is 0.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.