iio: adc: stm32-adc: fix possible division by zero in processed channel (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.17 % · percentile 7 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: iio: adc: stm32-adc: fix possible division by zero in processed channel In case the conversion has failed or returned zero, processing *val can lead to a division by zero. Need to check for errors, or converted value is zero, before processing the data. In case the converted value is zero, e.g. the Vrefint channel, this should be considered as invalid in all cases.
References
- https://git.kernel.org/stable/c/f6ec4b0769821d03083ce30e041c8349fca844eb
- https://git.kernel.org/stable/c/55f1cebee909c9a0d5c2e494bcfaabed54750eb5
- https://git.kernel.org/stable/c/30d27899cbba5b080954b5d3741bd535806c3101
- https://git.kernel.org/stable/c/6dd3bf785d0307d1cf8f4a97c2240b0af14bef50
- https://git.kernel.org/stable/c/ab4e57adead252dd7f947baed6178f32ede88d38
- https://git.kernel.org/stable/c/c5de6a6f855fdcf1e0ea549fb227a316db51c405
European references
- ENISA EUVD · EUVD-2026-103926
- GCVE · GCVE-0-2026-98672
CERT-FR advisories
- CERTFR-2026-AVI-1375 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 0e346b2cfa855d6e6990dbdb220983fbf2bb0b92 < f6ec4b0769821d03083ce30e041c8349fca844eb ; affected 0e346b2cfa855d6e6990dbdb220983fbf2bb0b92 < 55f1cebee909c9a0d5c2e494bcfaabed54750eb5 ; affected 0e346b2cfa855d6e6990dbdb220983fbf2bb0b92 < 30d27899cbba5b080954b5d3741bd535806c3101 ; affected 0e346b2cfa855d6e6990dbdb220983fbf2bb0b92 < 6dd3bf785d0307d1cf8f4a97c2240b0af14bef50 ; affected 0e346b2cfa855d6e6990dbdb220983fbf2bb0b92 < ab4e57adead252dd7f947baed6178f32ede88d38 ; affected 0e346b2cfa855d6e6990dbdb220983fbf2bb0b92 < c5de6a6f855fdcf1e0ea549fb227a316db51c405 |
| Linux · Linux | affected 5.16 ; unaffected 0 < 5.16 ; unaffected 6.1.191 ≤ 6.1.* ; unaffected 6.6.160 ≤ 6.6.* ; unaffected 6.12.113 ≤ 6.12.* ; unaffected 6.18.56 ≤ 6.18.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |