---
id: "CVE-2026-98672"
kind: "vulnerability"
aliases: ["CVE-2026-98672"]
title: "Linux kernel: STM32 ADC driver can divide by zero on failed conversion"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["embedded", "infrastructure", "linux-kernel", "stm32"]
not_affected_if: ["no-stm32-adc-hardware"]
published_at: "2026-10-18T16:17:20+00:00"
first_seen_at: "2026-10-23T21:57:16+00:00"
updated_at: "2026-10-25T05:19:21+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-98672", "first_seen_at": "2026-10-23T21:57:16+00:00"}]
---

# Linux kernel: STM32 ADC driver can divide by zero on failed conversion

A Linux kernel driver for STM32 analog-to-digital converters can divide by zero when a conversion fails or returns zero. The sources do not describe a way for an attacker to trigger it or gain access beyond a kernel crash.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- unknown

## Fix

- unknown

## Timeline

- 2026-10-23T21:57:16+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-98672

## From the sources

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: stm32-adc: fix possible division by zero in processed channel

In case the conversion has failed or returned zero, processing *val
can lead to a division by zero. Need to check for errors, or converted
value is zero, before processing the data. In case the converted value
is zero, e.g. the Vrefint channel, this should be considered as invalid
in all cases.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_