Live › vulnerability › CVE-2026-98678
Go to dashboardIn the Linux kernel's IIO ADC driver for the AD4030, the oversampling ratio setter computes a logarithm before validating its input, so zero or negative values produce an undefined result from ilog2(). The sources describe a fix that validates the input is strictly positive before the logarithm is computed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
iio: adc: ad4030: fix invalid oversampling_ratio validation
In ad4030_set_avg_frame_len(), the logarithm is calculated before input validation. Passing zero or negative values leads to an undefined result from ilog2().
Validate that the input is strictly positive prior to computing its logarithm.
This page as .md · .json · in your agent: get_signal("CVE-2026-98678")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.