CVE-2026-98672: iio: adc: stm32-adc: fix possible division by zero in processed channel
iio: adc: stm32-adc: fix possible division by zero in processed channel
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.113-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 7.2.10-1 - Upgrade
Upgrade
debian/linux-6.12to a version that resolves this vulnerability.Fixed in 6.12.113-1~deb12u1 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.1.191 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.6.160 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.12.113 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.18.56 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 7.2.10 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Compensating control
In the STM32 ADC processed-channel handling, check for conversion errors and reject converted values of zero before processing; treat a zero Vrefint value as invalid in all cases.
Event History
Frequently Asked Questions
What condition is required to trigger the fault?
A processed-channel read must proceed after an ADC conversion fails or returns zero. The Vrefint channel is an example where a zero converted value must be treated as invalid.
How can I identify systems that may be affected?
Review Linux kernel systems using the STM32 ADC IIO driver and determine whether processed ADC channel values are read. Systems where conversion failures or zero conversion results can occur are relevant to this issue.
What is the mitigation if the kernel fix cannot be deployed immediately?
Avoid processing ADC channel values when the conversion reports an error or yields zero. Treat zero results, including from Vrefint, as invalid rather than using them in calculations.