{"id":"CVE-2026-98673","kind":"vulnerability","aliases":["CVE-2026-98673"],"related":[],"title":"Linux kernel: missing check in pac1934 ACPI label handling","description":"In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: pac1934: check ACPI label duplication\n\nA label duplication failure currently reaches the terminating-byte\nwrite. Release the ACPI result and abort before accessing the missing\nlabel; earlier labels are managed by devres.\n\nDetected by static analysis and reviewed with AI-assisted source auditing.","summary":"The Linux kernel's IIO driver for the PAC1934 power monitor did not check for a failed ACPI label duplication before writing a terminating byte. The sources describe a fix that releases the ACPI result and aborts before touching the missing label.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["iio","infrastructure","kernel","linux"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-18T16:17:20+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","triaged_at":"2026-10-25T05:19:20+00:00","updated_at":"2026-10-25T05:19:20+00:00","category":"infrastructure","confidence":0.3,"triage":{"at":"2026-10-25T05:19:20Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Linux kernel: missing check in pac1934 ACPI label handling","impact":"low","summary":"The Linux kernel's IIO driver for the PAC1934 power monitor did not check for a failed ACPI label duplication before writing a terminating byte. The sources describe a fix that releases the ACPI result and aborts before touching the missing label.","category":"infrastructure","nicknames":[],"who_cares":["linux","kernel","iio"],"confidence":0.3,"needs_auth":"unknown","worst_case":"unknown; the sources do not state the impact of the missing check","analyst_note":"Find the upstream kernel commit and NVD scoring to confirm impact, affected kernel ranges and whether the PAC1934 driver with ACPI is common in deployments.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000514,"input_tokens":3340,"output_tokens":359,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':11A,14A '-98673':12A,15A 'abort':56B,95C 'access':97C 'acpi':7A,37B,53B,76C,92C 'adc':73C 'ai':115C 'ai-assist':114C 'analysi':110C 'assist':116C 'audit':118C 'byte':44B,88C 'check':4A,33B,75C 'current':83C 'cve':10A,13A 'describ':47B 'detect':107C 'devr':106C 'driver':25B 'duplic':39B,78C,81C 'earlier':101C 'fail':36B 'failur':82C 'fix':49B 'follow':67C 'handl':9A 'iio':16B,24B,72C 'infrastructur':17B 'kernel':2A,18B,22B,65C 'label':8A,38B,61B,77C,80C,100C,102C 'linux':1A,19B,21B,64C 'manag':104C 'miss':3A,60B,99C 'monitor':30B 'pac1934':6A,28B,74C 'power':29B 'reach':84C 'releas':51B,90C 'resolv':71C 'result':54B,93C 'review':112C 'sourc':46B,117C 'static':109C 'termin':43B,87C 'terminating-byt':86C 'touch':58B 'vulner':68C 'write':41B,89C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T16:17:20+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98673","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98673","severity":null,"published_at":"2026-10-18T16:17:20+00:00","modified_at":"2026-10-19T10:19:31+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}