CVE-2026-98678: iio: adc: ad4030: fix invalid oversampling_ratio validation
In the Linux kernel, the following vulnerability has been resolved:
iio: adc: ad4030: fix invalid oversamplingratio validation
In ad4030setavgframelen(), the logarithm is calculated before input validation. Passing zero or negative values leads to an undefined result from ilog2().
Validate that the input is strictly positive prior to computing its logarithm.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In ad4030_set_avg_frame_len(), validate that the input is strictly positive before computing its logarithm with ilog2().