CVE-2026-98676iio: adc: ade9000: fix NULL pointer dereference in clkout registration
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ade9000: fix NULL pointer dereference in clkout registration ade9000_setup_clkout() passes NULL as the register address when registering a divider clock. During clock registration, the common clock framework calls clk_divider_recalc_rate(), which dereferences the address through readl(). As a result, probing an ADE9000 configured as a clock provider with an external input clock crashes. CLKOUT passes CLKIN through without changing its rate. Register it as a 1:1 fixed-factor clock, which does not require register access. This change does not affect the configuration using the internal clock, for which the driver does not register a clock provider.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from 81de7b4619fc3682a3bedaa7e8d6b2d67ab4e10a before d2400175228fbc10b29c49a7b5f70a7e80d144dd; from 81de7b4619fc3682a3bedaa7e8d6b2d67ab4e10a before 134aa31a8d4e71f6ab1d155ad7b4502508832f72; 81de7b4619fc3682a3bedaa7e8d6b2d67ab4e10a builds before 49ee1c6a3ebda6b7de06b2961b0e09c1c3fe536a | CNA record |
References
- https://git.kernel.org/stable/c/d2400175228fbc10b29c49a7b5f70a7e80d144dd
- https://git.kernel.org/stable/c/134aa31a8d4e71f6ab1d155ad7b4502508832f72
- https://git.kernel.org/stable/c/49ee1c6a3ebda6b7de06b2961b0e09c1c3fe536a
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.