CVE-2026-98660iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup The sampling frequency tables store each frequency as an integer part and a fractional part in micro units. num_sampling_freq_avail is initialized to the number of flattened integer elements because read_avail() returns the table as a flat array. bmp280_write_sampling_frequency(), however, indexes the same table as a two-dimensional array and uses num_sampling_freq_avail as the number of rows. Convert the flattened element count back to the number of rows before iterating over the table.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | 10b40ffba2f95cdeed47b731c5ad5ecc73e140e8 builds before 9db6684fab228edd3b8861a172ccbce3236f027a; 10b40ffba2f95cdeed47b731c5ad5ecc73e140e8 builds before 4fd5a61e61d6899cbd45728a5fceba49a53c222d; 10b40ffba2f95cdeed47b731c5ad5ecc73e140e8 builds before 7dbb518f3328ebd9d5c6e970b4befad6deb5c7f1; from 10b40ffba2f95cdeed47b731c5ad5ecc73e140e8 before 56c423b233b214182c58c99861899327b45b0d6c | CNA record |
References
- https://git.kernel.org/stable/c/9db6684fab228edd3b8861a172ccbce3236f027a
- https://git.kernel.org/stable/c/4fd5a61e61d6899cbd45728a5fceba49a53c222d
- https://git.kernel.org/stable/c/7dbb518f3328ebd9d5c6e970b4befad6deb5c7f1
- https://git.kernel.org/stable/c/56c423b233b214182c58c99861899327b45b0d6c
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.