CVE-2026-98660

iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup

State: Published
Severity: Not scored
Published: Oct 18, 2026
Updated: Oct 30, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup

The sampling frequency tables store each frequency as an integer part and a fractional part in micro units. num_sampling_freq_avail is initialized to the number of flattened integer elements because read_avail() returns the table as a flat array.

bmp280_write_sampling_frequency(), however, indexes the same table as a two-dimensional array and uses num_sampling_freq_avail as the number of rows. Convert the flattened element count back to the number of rows before iterating over the table.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	10b40ffba2f95cdeed47b731c5ad5ecc73e140e8 to before fed876157271fc4bc28b8739ad73642553a5920eAffected 10b40ffba2f95cdeed47b731c5ad5ecc73e140e8 to before 05ef1af381a0f4556c7e3c0dc6bc2428d16c707eAffected 10b40ffba2f95cdeed47b731c5ad5ecc73e140e8 to before 9db6684fab228edd3b8861a172ccbce3236f027aAffected 10b40ffba2f95cdeed47b731c5ad5ecc73e140e8 to before 4fd5a61e61d6899cbd45728a5fceba49a53c222dAffected 10b40ffba2f95cdeed47b731c5ad5ecc73e140e8 to before 7dbb518f3328ebd9d5c6e970b4befad6deb5c7f1Affected 10b40ffba2f95cdeed47b731c5ad5ecc73e140e8 to before 56c423b233b214182c58c99861899327b45b0d6cAffected
LinuxLinux	6.1Affected before 6.1Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.113 through 6.12.Not affected 6.18.56 through 6.18.Not affected 7.2.10 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

10b40ffba2f95cdeed47b731c5ad5ecc73e140e8 to before fed876157271fc4bc28b8739ad73642553a5920eAffected
10b40ffba2f95cdeed47b731c5ad5ecc73e140e8 to before 05ef1af381a0f4556c7e3c0dc6bc2428d16c707eAffected
10b40ffba2f95cdeed47b731c5ad5ecc73e140e8 to before 9db6684fab228edd3b8861a172ccbce3236f027aAffected
10b40ffba2f95cdeed47b731c5ad5ecc73e140e8 to before 4fd5a61e61d6899cbd45728a5fceba49a53c222dAffected
10b40ffba2f95cdeed47b731c5ad5ecc73e140e8 to before 7dbb518f3328ebd9d5c6e970b4befad6deb5c7f1Affected
10b40ffba2f95cdeed47b731c5ad5ecc73e140e8 to before 56c423b233b214182c58c99861899327b45b0d6cAffected

LinuxLinux

6.1Affected
before 6.1Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.113 through 6.12.*Not affected
6.18.56 through 6.18.*Not affected
7.2.10 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.