CVE-2026-98678 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved:

iio: adc: ad4030: fix invalid oversampling_ratio validation

In ad4030_set_avg_frame_len(), the logarithm is calculated before input
validation. Passing zero or negative values leads to an undefined result
from ilog2().

Validate that the input is strictly positive prior to computing its
logarithm.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux Subscribe	Linux Kernel Subscribe

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://git.kernel.org/stable/c/6b0cc4e32599f59c994a60743f53fc72cb2979f4
https://git.kernel.org/stable/c/6ca6dcbaa68c5e6dc4df171a32c5822e1a4c66c1
https://git.kernel.org/stable/c/d615210564205993e8f0e7ccb57cc2e66b7d5706

History

Sun, 18 Oct 2026 16:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad4030: fix invalid oversampling_ratio validation In ad4030_set_avg_frame_len(), the logarithm is calculated before input validation. Passing zero or negative values leads to an undefined result from ilog2(). Validate that the input is strictly positive prior to computing its logarithm.
Title		iio: adc: ad4030: fix invalid oversampling_ratio validation
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/6b0cc4e32599f59c994a60743f53fc72cb2979f4 https://git.kernel.org/stable/c/6ca6dcbaa68c5e6dc4df171a32c5822e1a4c66c1 https://git.kernel.org/stable/c/d615210564205993e8f0e7ccb57cc2e66b7d5706

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-10-18T15:45:35.605Z

Updated: 2026-10-18T15:45:35.605Z

Reserved: 2026-09-25T10:25:14.363Z

Link: CVE-2026-98678

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-10-18T16:17:21.160

Modified: 2026-10-18T16:17:21.160

Link: CVE-2026-98678

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98678", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.363Z", "datePublished": "2026-10-18T15:45:35.605Z", "dateUpdated": "2026-10-18T15:45:35.605Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-18T15:45:35.605Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: ad4030: fix invalid oversampling_ratio validation\n\nIn ad4030_set_avg_frame_len(), the logarithm is calculated before input\nvalidation. Passing zero or negative values leads to an undefined result\nfrom ilog2().\n\nValidate that the input is strictly positive prior to computing its\nlogarithm."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iio/adc/ad4030.c"], "versions": [{"version": "949abd1ca5a4342d9fb8c774035222e65dd1cfe4", "lessThan": "6b0cc4e32599f59c994a60743f53fc72cb2979f4", "status": "affected", "versionType": "git"}, {"version": "949abd1ca5a4342d9fb8c774035222e65dd1cfe4", "lessThan": "6ca6dcbaa68c5e6dc4df171a32c5822e1a4c66c1", "status": "affected", "versionType": "git"}, {"version": "949abd1ca5a4342d9fb8c774035222e65dd1cfe4", "lessThan": "d615210564205993e8f0e7ccb57cc2e66b7d5706", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iio/adc/ad4030.c"], "versions": [{"version": "6.15", "status": "affected"}, {"version": "0", "lessThan": "6.15", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.56", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.10", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3-rc6", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "6.18.56"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "7.2.10"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15", "versionEndExcluding": "7.3-rc6"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/6b0cc4e32599f59c994a60743f53fc72cb2979f4"}, {"url": "https://git.kernel.org/stable/c/6ca6dcbaa68c5e6dc4df171a32c5822e1a4c66c1"}, {"url": "https://git.kernel.org/stable/c/d615210564205993e8f0e7ccb57cc2e66b7d5706"}], "title": "iio: adc: ad4030: fix invalid oversampling_ratio validation", "x_generator": {"engine": "bippy-1.2.0"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/iio/adc/ad4030.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "6b0cc4e32599f59c994a60743f53fc72cb2979f4", "status": "affected", "version": "949abd1ca5a4342d9fb8c774035222e65dd1cfe4", "versionType": "git"}, {"lessThan": "6ca6dcbaa68c5e6dc4df171a32c5822e1a4c66c1", "status": "affected", "version": "949abd1ca5a4342d9fb8c774035222e65dd1cfe4", "versionType": "git"}, {"lessThan": "d615210564205993e8f0e7ccb57cc2e66b7d5706", "status": "affected", "version": "949abd1ca5a4342d9fb8c774035222e65dd1cfe4", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/iio/adc/ad4030.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.15"}, {"lessThan": "6.15", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.56", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.10", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3-rc6", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: ad4030: fix invalid oversampling_ratio validation\n\nIn ad4030_set_avg_frame_len(), the logarithm is calculated before input\nvalidation. Passing zero or negative values leads to an undefined result\nfrom ilog2().\n\nValidate that the input is strictly positive prior to computing its\nlogarithm."}], "id": "CVE-2026-98678", "lastModified": "2026-10-18T16:17:21.160", "metrics": {}, "published": "2026-10-18T16:17:21.160", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6b0cc4e32599f59c994a60743f53fc72cb2979f4"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6ca6dcbaa68c5e6dc4df171a32c5822e1a4c66c1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d615210564205993e8f0e7ccb57cc2e66b7d5706"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}