CVE-2026-98673: iio: adc: pac1934: check ACPI label duplication

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-18 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: iio: adc: pac1934: check ACPI label duplication A label duplication failure currently reaches the terminating-byte write. Release the ACPI result and abort before accessing the missing label; earlier labels are managed by devres. Detected by static analysis and reviewed with AI-assisted source auditing.

Affected products

Linux kernel: 6.9 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/2eb7f097e15dc8935b49402456d01f3ab68f3ddd
https://git.kernel.org/stable/c/64c82e7bd9c82b0c9276297df34a3579e8658f55
https://git.kernel.org/stable/c/7996557c6b7d3b136668060057a790e058161dfe
https://git.kernel.org/stable/c/b7ac07d0b1a44bf644733298e80fd1f22e2f0cc1

Get alerted when CVE-2026-98673 or the next vulnerability affects your stack