CVE-2026-64497

CVE-2026-64497

published July 25, 2026

CVSS
—
EPSS
0%
Percentile
6.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

iio: chemical: scd30: Cleanup initializations and fix sign-extension bug

Include linux/bitfield.h for FIELD_GET().

Create new macros for bit manipulation in combination with manual bit

manipulation being replaced with FIELD_GET().

The current variable declaration and initializations are barely readable

and use comma separations across multiple lines. Refactor the

initializations so that mantissa and exp have separate declarations and

sign gets initialized later.

In addition (and due to the nature of the cleanup), fix a sign-extension

bug where, float32 would get bitwise anded with ~BIT(31)

(which is 0xFFFFFFFF7FFFFFFF) which corrupted the exponent.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00177 · 6.9th percentile
Published
2026-07-25T14:17Z
References (8)
EPSS history
Timeline
  • 25 JUL 08:51Z
    iio: chemical: scd30: Cleanup initializations and fix sign-extension bug
    cvelistv5