CVE-2026-98678

iio: adc: ad4030: fix invalid oversampling_ratio validation

State
Published
Severity
Not scored
Published
Oct 18, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: ad4030: fix invalid oversampling_ratio validation

In ad4030_set_avg_frame_len(), the logarithm is calculated before input validation. Passing zero or negative values leads to an undefined result from ilog2().

Validate that the input is strictly positive prior to computing its logarithm.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 949abd1ca5a4342d9fb8c774035222e65dd1cfe4 to before 6b0cc4e32599f59c994a60743f53fc72cb2979f4Affected
  • 949abd1ca5a4342d9fb8c774035222e65dd1cfe4 to before 6ca6dcbaa68c5e6dc4df171a32c5822e1a4c66c1Affected
  • 949abd1ca5a4342d9fb8c774035222e65dd1cfe4 to before d615210564205993e8f0e7ccb57cc2e66b7d5706Affected
LinuxLinux
  • 6.15Affected
  • before 6.15Not affected
  • 6.18.56 through 6.18.*Not affected
  • 7.2.10 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.