CVE-2026-98673: iio: adc: pac1934: check ACPI label duplication
In the Linux kernel, the following vulnerability has been resolved:
iio: adc: pac1934: check ACPI label duplication
A label duplication failure currently reaches the terminating-byte write. Release the ACPI result and abort before accessing the missing label; earlier labels are managed by devres.
Detected by static analysis and reviewed with AI-assisted source auditing.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In the iio: adc: pac1934 ACPI label handling, release the ACPI result and abort before accessing a missing label; earlier labels remain managed by devres.
Event History
Frequently Asked Questions
What condition is required to trigger the flaw?
The PAC1934 ADC driver's ACPI label handling must encounter a label-duplication failure. The vulnerable path then accesses a missing label and reaches a terminating-byte write.
What should be done if the affected driver is in use?
Apply a Linux kernel update containing the referenced fix. The fix releases the ACPI result and aborts processing when label duplication fails, preventing access to the missing label.
Is there evidence that this issue was found through active exploitation?
No. The available information says it was detected by static analysis and reviewed through AI-assisted source auditing; it does not provide evidence of exploitation.