CVE-2026-98678iio: adc: ad4030: fix invalid oversampling_ratio validation
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad4030: fix invalid oversampling_ratio validation In ad4030_set_avg_frame_len(), the logarithm is calculated before input validation. Passing zero or negative values leads to an undefined result from ilog2(). Validate that the input is strictly positive prior to computing its logarithm.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | 949abd1ca5a4342d9fb8c774035222e65dd1cfe4 builds before 6b0cc4e32599f59c994a60743f53fc72cb2979f4; 949abd1ca5a4342d9fb8c774035222e65dd1cfe4 builds before 6ca6dcbaa68c5e6dc4df171a32c5822e1a4c66c1; from 949abd1ca5a4342d9fb8c774035222e65dd1cfe4 before d615210564205993e8f0e7ccb57cc2e66b7d5706 | CNA record |
References
- https://git.kernel.org/stable/c/6b0cc4e32599f59c994a60743f53fc72cb2979f4
- https://git.kernel.org/stable/c/6ca6dcbaa68c5e6dc4df171a32c5822e1a4c66c1
- https://git.kernel.org/stable/c/d615210564205993e8f0e7ccb57cc2e66b7d5706
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.