What’s Vulnerable › Vulnerabilities

CVE-2026-98672: iio: adc: stm32-adc: fix possible division by zero in processed channel

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-18 · updated 2026-10-30

Description

In the Linux kernel, the following vulnerability has been resolved: iio: adc: stm32-adc: fix possible division by zero in processed channel In case the conversion has failed or returned zero, processing *val can lead to a division by zero. Need to check for errors, or converted value is zero, before processing the data. In case the converted value is zero, e.g. the Vrefint channel, this should be considered as invalid in all cases.

Affected products

• Linux: 5.16 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/30d27899cbba5b080954b5d3741bd535806c3101
• https://git.kernel.org/stable/c/55f1cebee909c9a0d5c2e494bcfaabed54750eb5
• https://git.kernel.org/stable/c/6dd3bf785d0307d1cf8f4a97c2240b0af14bef50
• https://git.kernel.org/stable/c/ab4e57adead252dd7f947baed6178f32ede88d38
• https://git.kernel.org/stable/c/c5de6a6f855fdcf1e0ea549fb227a316db51c405
• https://git.kernel.org/stable/c/f6ec4b0769821d03083ce30e041c8349fca844eb

Get alerted when CVE-2026-98672 or the next vulnerability affects your stack