The Linux kernel's iio adc ti-ads1298 driver contained a vulnerability due to missing bounds checking on the pga_settings index. Specifically, the ads1298_pga_settings array has 7 elements, but the ADS1298_MASK_CH_PGA mask can produce values from 0 to 7 inclusive. If the value is 7 or higher, this results in an out-of-bounds array access. The fix adds a bounds check that returns -EINVAL if the index is out of range, preventing potential memory corruption or other impacts.

This vulnerability allows an out-of-bounds array access in kernel space, which can lead to high impact including confidentiality, integrity, and availability loss as indicated by the CVSS score of 7.8 (High). The vulnerability requires local access with low privileges and no user interaction. Exploitation could cause system instability or potentially allow privilege escalation or code execution.

A fix has been implemented that adds a bounds check to the pga_settings index in the Linux kernel driver. Users should update their Linux kernel to a version that includes this patch. Since this is a kernel vulnerability, applying the official kernel update from the vendor or distribution is the recommended remediation. Patch status is not explicitly stated in the provided data; users should check their Linux distribution's security advisories for the official fix.