A memory safety flaw in the Linux kernel ti-adc161s626 driver allows local attackers to compromise system confidentiality, integrity, and availability.

This is an improper memory handling vulnerability within the ti-adc161s626 analog-to-digital converter driver, specifically failing to use DMA-safe memory for spi_read operations by relying on stack memory instead, requiring low privileges for local exploitation.

A successful exploit can lead to complete host compromise, including unauthorized data exposure, system tampering, and unexpected reboots or crashes causing operational downtime. The CVSS score of 7.8 reflects the high severity of potential local privilege escalation and system disruption.

Immediate Action: Update the Linux kernel to version 6.1.168, 6.6.134, 6.12.81, 6.18.22, or later where the patch has been integrated.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unauthorized local execution attempts involving hardware drivers.

Compensating Controls: Restrict local shell access and apply strict user privilege boundaries to prevent untrusted users from executing arbitrary code on the host.

Public Exploit Available: No - unknown

Given the high severity score and potential for complete system compromise, administrators should prioritize updating affected Linux kernel packages immediately. Applying the upstream patches eliminates the underlying memory safety weakness in the hardware driver.