CVE-2026-98661

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98661", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.363Z", "datePublished": "2026-10-18T15:44:21.543Z", "dateUpdated": "2026-10-19T09:23:29.422Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T09:23:29.422Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: light: rohm-bu27034: Fix infinite delay on error\n\nWhen reading an integration-time fails, the code will use error code to\ncompute the sleep time.\n\nFix this by using the smallest integration time as a default if\nreading fails."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iio/light/rohm-bu27034.c"], "versions": [{"version": "e52afbd61039e2c5a4e611e23b4aa963d34a4aef", "lessThan": "050482f958521d80603e88d5c3a59872528ec13c", "status": "affected", "versionType": "git"}, {"version": "e52afbd61039e2c5a4e611e23b4aa963d34a4aef", "lessThan": "10a958e76c737c19576e1097c49f210eb99b94bf", "status": "affected", "versionType": "git"}, {"version": "e52afbd61039e2c5a4e611e23b4aa963d34a4aef", "lessThan": "6a27402a8ff1f63464557c5274a4115b60ea1f2f", "status": "affected", "versionType": "git"}, {"version": "e52afbd61039e2c5a4e611e23b4aa963d34a4aef", "lessThan": "8065a6c02f629187131f3136bedb26f9080e3cca", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iio/light/rohm-bu27034.c"], "versions": [{"version": "6.4", "status": "affected"}, {"version": "0", "lessThan": "6.4", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.113", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.56", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.10", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "6.12.113"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "6.18.56"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "7.2.10"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/050482f958521d80603e88d5c3a59872528ec13c"}, {"url": "https://git.kernel.org/stable/c/10a958e76c737c19576e1097c49f210eb99b94bf"}, {"url": "https://git.kernel.org/stable/c/6a27402a8ff1f63464557c5274a4115b60ea1f2f"}, {"url": "https://git.kernel.org/stable/c/8065a6c02f629187131f3136bedb26f9080e3cca"}], "title": "iio: light: rohm-bu27034: Fix infinite delay on error", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/iio/light/rohm-bu27034.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "050482f958521d80603e88d5c3a59872528ec13c", "status": "affected", "version": "e52afbd61039e2c5a4e611e23b4aa963d34a4aef", "versionType": "git"}, {"lessThan": "10a958e76c737c19576e1097c49f210eb99b94bf", "status": "affected", "version": "e52afbd61039e2c5a4e611e23b4aa963d34a4aef", "versionType": "git"}, {"lessThan": "6a27402a8ff1f63464557c5274a4115b60ea1f2f", "status": "affected", "version": "e52afbd61039e2c5a4e611e23b4aa963d34a4aef", "versionType": "git"}, {"lessThan": "8065a6c02f629187131f3136bedb26f9080e3cca", "status": "affected", "version": "e52afbd61039e2c5a4e611e23b4aa963d34a4aef", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/iio/light/rohm-bu27034.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.4"}, {"lessThan": "6.4", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.113", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.56", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.10", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: light: rohm-bu27034: Fix infinite delay on error\n\nWhen reading an integration-time fails, the code will use error code to\ncompute the sleep time.\n\nFix this by using the smallest integration time as a default if\nreading fails."}], "id": "CVE-2026-98661", "lastModified": "2026-10-19T10:19:30.520", "metrics": {}, "published": "2026-10-18T16:17:19.410", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/050482f958521d80603e88d5c3a59872528ec13c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/10a958e76c737c19576e1097c49f210eb99b94bf"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6a27402a8ff1f63464557c5274a4115b60ea1f2f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/8065a6c02f629187131f3136bedb26f9080e3cca"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: iio: light: rohm-bu27034: Fix infinite delay on error", "id": "2555162", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2555162"}, "csaw": false, "cvss3": {"cvss3_base_score": "2.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-252", "details": ["In the Linux kernel, the following vulnerability has been resolved:\niio: light: rohm-bu27034: Fix infinite delay on error\nWhen reading an integration-time fails, the code will use error code to\ncompute the sleep time.\nFix this by using the smallest integration time as a default if\nreading fails.", "A flaw was found in the Linux kernel's ROHM BU27034 ambient light sensor driver. When reading the sensor integration time fails, the driver improperly uses the returned error code to calculate sleep duration. A local user interacting with the sensor interface during a read failure can cause the driver to enter an indefinite delay, leading to a denial of service (DoS) for the device."], "name": "CVE-2026-98661", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-18T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98661\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98661\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98661.mbox"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[e52afbd61039e2c5a4e611e23b4aa963d34a4aef,050482f958521d80603e88d5c3a59872528ec13c)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[e52afbd61039e2c5a4e611e23b4aa963d34a4aef,10a958e76c737c19576e1097c49f210eb99b94bf)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[e52afbd61039e2c5a4e611e23b4aa963d34a4aef,6a27402a8ff1f63464557c5274a4115b60ea1f2f)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[e52afbd61039e2c5a4e611e23b4aa963d34a4aef,8065a6c02f629187131f3136bedb26f9080e3cca)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.4"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.4)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.113,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.56,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.10,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc6,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-18T23:00:12.909678+00:00", "updated": "2026-10-23T06:30:07.432909+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}