CVE-2026-98672

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98672", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.363Z", "datePublished": "2026-10-18T15:45:25.169Z", "dateUpdated": "2026-10-30T12:38:39.835Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-30T12:38:39.835Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: stm32-adc: fix possible division by zero in processed channel\n\nIn case the conversion has failed or returned zero, processing *val\ncan lead to a division by zero. Need to check for errors, or converted\nvalue is zero, before processing the data. In case the converted value\nis zero, e.g. the Vrefint channel, this should be considered as invalid\nin all cases."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iio/adc/stm32-adc.c"], "versions": [{"version": "0e346b2cfa855d6e6990dbdb220983fbf2bb0b92", "lessThan": "f6ec4b0769821d03083ce30e041c8349fca844eb", "status": "affected", "versionType": "git"}, {"version": "0e346b2cfa855d6e6990dbdb220983fbf2bb0b92", "lessThan": "55f1cebee909c9a0d5c2e494bcfaabed54750eb5", "status": "affected", "versionType": "git"}, {"version": "0e346b2cfa855d6e6990dbdb220983fbf2bb0b92", "lessThan": "30d27899cbba5b080954b5d3741bd535806c3101", "status": "affected", "versionType": "git"}, {"version": "0e346b2cfa855d6e6990dbdb220983fbf2bb0b92", "lessThan": "6dd3bf785d0307d1cf8f4a97c2240b0af14bef50", "status": "affected", "versionType": "git"}, {"version": "0e346b2cfa855d6e6990dbdb220983fbf2bb0b92", "lessThan": "ab4e57adead252dd7f947baed6178f32ede88d38", "status": "affected", "versionType": "git"}, {"version": "0e346b2cfa855d6e6990dbdb220983fbf2bb0b92", "lessThan": "c5de6a6f855fdcf1e0ea549fb227a316db51c405", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/iio/adc/stm32-adc.c"], "versions": [{"version": "5.16", "status": "affected"}, {"version": "0", "lessThan": "5.16", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.191", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.160", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.113", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.56", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.10", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.1.191"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.6.160"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.12.113"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "6.18.56"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "7.2.10"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.16", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/f6ec4b0769821d03083ce30e041c8349fca844eb"}, {"url": "https://git.kernel.org/stable/c/55f1cebee909c9a0d5c2e494bcfaabed54750eb5"}, {"url": "https://git.kernel.org/stable/c/30d27899cbba5b080954b5d3741bd535806c3101"}, {"url": "https://git.kernel.org/stable/c/6dd3bf785d0307d1cf8f4a97c2240b0af14bef50"}, {"url": "https://git.kernel.org/stable/c/ab4e57adead252dd7f947baed6178f32ede88d38"}, {"url": "https://git.kernel.org/stable/c/c5de6a6f855fdcf1e0ea549fb227a316db51c405"}], "title": "iio: adc: stm32-adc: fix possible division by zero in processed channel", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/iio/adc/stm32-adc.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "f6ec4b0769821d03083ce30e041c8349fca844eb", "status": "affected", "version": "0e346b2cfa855d6e6990dbdb220983fbf2bb0b92", "versionType": "git"}, {"lessThan": "55f1cebee909c9a0d5c2e494bcfaabed54750eb5", "status": "affected", "version": "0e346b2cfa855d6e6990dbdb220983fbf2bb0b92", "versionType": "git"}, {"lessThan": "30d27899cbba5b080954b5d3741bd535806c3101", "status": "affected", "version": "0e346b2cfa855d6e6990dbdb220983fbf2bb0b92", "versionType": "git"}, {"lessThan": "6dd3bf785d0307d1cf8f4a97c2240b0af14bef50", "status": "affected", "version": "0e346b2cfa855d6e6990dbdb220983fbf2bb0b92", "versionType": "git"}, {"lessThan": "ab4e57adead252dd7f947baed6178f32ede88d38", "status": "affected", "version": "0e346b2cfa855d6e6990dbdb220983fbf2bb0b92", "versionType": "git"}, {"lessThan": "c5de6a6f855fdcf1e0ea549fb227a316db51c405", "status": "affected", "version": "0e346b2cfa855d6e6990dbdb220983fbf2bb0b92", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/iio/adc/stm32-adc.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.16"}, {"lessThan": "5.16", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.191", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.160", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.113", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.56", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.10", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: stm32-adc: fix possible division by zero in processed channel\n\nIn case the conversion has failed or returned zero, processing *val\ncan lead to a division by zero. Need to check for errors, or converted\nvalue is zero, before processing the data. In case the converted value\nis zero, e.g. the Vrefint channel, this should be considered as invalid\nin all cases."}], "id": "CVE-2026-98672", "lastModified": "2026-10-30T13:21:17.637", "metrics": {}, "published": "2026-10-18T16:17:20.543", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/30d27899cbba5b080954b5d3741bd535806c3101"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/55f1cebee909c9a0d5c2e494bcfaabed54750eb5"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6dd3bf785d0307d1cf8f4a97c2240b0af14bef50"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/ab4e57adead252dd7f947baed6178f32ede88d38"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/c5de6a6f855fdcf1e0ea549fb227a316db51c405"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f6ec4b0769821d03083ce30e041c8349fca844eb"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: iio: adc: stm32-adc: fix possible division by zero in processed channel", "id": "2555086", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2555086"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.7", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-369", "details": ["In the Linux kernel, the following vulnerability has been resolved:\niio: adc: stm32-adc: fix possible division by zero in processed channel\nIn case the conversion has failed or returned zero, processing *val\ncan lead to a division by zero. Need to check for errors, or converted\nvalue is zero, before processing the data. In case the converted value\nis zero, e.g. the Vrefint channel, this should be considered as invalid\nin all cases.", "A flaw was found in the Linux kernel's STM32 Analog-to-Digital Converter (ADC) driver. When an ADC conversion fails or returns a zero value, subsequent calculation on the channel data can trigger a division by zero. A local user could exploit this vulnerability to crash the system, leading to a Denial of Service (DoS)."], "name": "CVE-2026-98672", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-18T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98672\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98672\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98672.mbox"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0e346b2cfa855d6e6990dbdb220983fbf2bb0b92,30d27899cbba5b080954b5d3741bd535806c3101)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0e346b2cfa855d6e6990dbdb220983fbf2bb0b92,6dd3bf785d0307d1cf8f4a97c2240b0af14bef50)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0e346b2cfa855d6e6990dbdb220983fbf2bb0b92,ab4e57adead252dd7f947baed6178f32ede88d38)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0e346b2cfa855d6e6990dbdb220983fbf2bb0b92,c5de6a6f855fdcf1e0ea549fb227a316db51c405)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "5.16"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,5.16)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.12.113,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.18.56,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2.10,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc6,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-18T22:30:13.855747+00:00", "updated": "2026-10-22T22:00:15.015261+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}