Live › vulnerability › CVE-2026-98672
Go to dashboardA Linux kernel driver for STM32 analog-to-digital converters can divide by zero when a conversion fails or returns zero. The sources do not describe a way for an attacker to trigger it or gain access beyond a kernel crash.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running a Linux kernel with the STM32 ADC industrial I/O driver (iio: adc: stm32-adc) on STM32 microcontroller-based boards. The sources do not say which kernel versions are affected or whether a default build includes this driver.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
iio: adc: stm32-adc: fix possible division by zero in processed channel
In case the conversion has failed or returned zero, processing *val can lead to a division by zero. Need to check for errors, or converted value is zero, before processing the data. In case the converted value is zero, e.g. the Vrefint channel, this should be considered as invalid in all cases.
This page as .md · .json · in your agent: get_signal("CVE-2026-98672")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.