{"id":"CVE-2026-98672","kind":"vulnerability","aliases":["CVE-2026-98672"],"related":[],"title":"Linux kernel: STM32 ADC driver can divide by zero on failed conversion","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: stm32-adc: fix possible division by zero in processed channel\n\nIn case the conversion has failed or returned zero, processing *val\ncan lead to a division by zero. Need to check for errors, or converted\nvalue is zero, before processing the data. In case the converted value\nis zero, e.g. the Vrefint channel, this should be considered as invalid\nin all cases.","summary":"A Linux kernel driver for STM32 analog-to-digital converters can divide by zero when a conversion fails or returns zero. The sources do not describe a way for an attacker to trigger it or gain access beyond a kernel crash.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["embedded","infrastructure","linux-kernel","stm32"],"not_affected_if":["no-stm32-adc-hardware"],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-18T16:17:20+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","triaged_at":"2026-10-25T05:19:21+00:00","updated_at":"2026-10-25T05:19:21+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T05:19:21Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"local","title":"Linux kernel: STM32 ADC driver can divide by zero on failed conversion","impact":"low","summary":"A Linux kernel driver for STM32 analog-to-digital converters can divide by zero when a conversion fails or returns zero. The sources do not describe a way for an attacker to trigger it or gain access beyond a kernel crash.","category":"infrastructure","nicknames":[],"who_cares":["linux-kernel","stm32","embedded"],"confidence":0.5,"needs_auth":"unknown","worst_case":"kernel division-by-zero crash on STM32 ADC hardware","analyst_note":"Check the upstream kernel commit and NVD entry for affected and fixed kernel versions and whether the driver is reachable from user space.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["no-stm32-adc-hardware"],"who_is_affected":"Systems running a Linux kernel with the STM32 ADC industrial I/O driver (iio: adc: stm32-adc) on STM32 microcontroller-based boards. The sources do not say which kernel versions are affected or whether a default build includes this driver.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.00056,"input_tokens":3356,"output_tokens":449,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-98672':15A,18A 'access':62B 'adc':4A,78C,81C 'analog':32B 'analog-to-digit':31B 'attack':56B 'beyond':63B 'case':91C,123C,141C 'channel':89C,132C 'check':110C 'consid':136C 'convers':12A,42B,93C 'convert':35B,114C,125C 'crash':66B 'cve':13A,16A 'data':121C 'describ':51B 'digit':34B 'divid':7A,37B 'divis':84C,105C 'driver':5A,28B 'e.g':129C 'embed':19B 'error':112C 'fail':11A,43B,95C 'fix':82C 'follow':72C 'gain':61B 'iio':77C 'infrastructur':20B 'invalid':138C 'kernel':2A,23B,27B,65B,70C 'lead':102C 'linux':1A,22B,26B,69C 'linux-kernel':21B 'need':108C 'possibl':83C 'process':88C,99C,119C 'resolv':76C 'return':45B,97C 'sourc':48B 'stm32':3A,24B,30B,80C 'stm32-adc':79C 'trigger':58B 'val':100C 'valu':115C,126C 'vrefint':131C 'vulner':73C 'way':53B 'zero':9A,39B,46B,86C,98C,107C,117C,128C","nicknames":[],"mitigations":[],"who_affected":"Systems running a Linux kernel with the STM32 ADC industrial I/O driver (iio: adc: stm32-adc) on STM32 microcontroller-based boards. The sources do not say which kernel versions are affected or whether a default build includes this driver.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T16:17:20+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98672","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98672","severity":null,"published_at":"2026-10-18T16:17:20+00:00","modified_at":"2026-10-21T13:21:36+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}