CVE-2026-98678

CVE-2026-98678

published October 18, 2026

CVSS
—
EPSS
0%
Percentile
5.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: ad4030: fix invalid oversampling_ratio validation

In ad4030_set_avg_frame_len(), the logarithm is calculated before input

validation. Passing zero or negative values leads to an undefined result

from ilog2().

Validate that the input is strictly positive prior to computing its

logarithm.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00166 · 5.5th percentile
Published
2026-10-18T20:17Z
References (3)
EPSS history
Timeline
  • 20 OCT 03:34Z
    EPSS moved — → 0%
    epss
  • 18 OCT 15:45Z
    iio: adc: ad4030: fix invalid oversampling_ratio validation
    cvelistv5
  • 18 OCT 15:45Z
    iio: adc: ad4030: fix invalid oversampling_ratio validation
    cvelistv5