CVE-2026-98675: iio: adc: ade9000: handle Phase C dip events in IRQ1 handler

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-18 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ade9000: handle Phase C dip events in IRQ1 handler ADE9000_ST1_CROSSING_DEPTH is the exclusive upper bound for scanning the STATUS1 event bits, so a value of 25 left out the highest event bit, ADE9000_ST1_DIPC_BIT (bit 25). Phase C dip events were never reported. Bump the value to 26 so bit 25 is scanned.

Affected products

Linux kernel: 6.18 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/d338af069f08658f53231adb445ddb10048730ac
https://git.kernel.org/stable/c/f73b94acc7ec81f9c49feb87f649ba5a80a0905c
https://git.kernel.org/stable/c/fafefa925ed7ec10383d9bf0378abf878b7f13cb

Get alerted when CVE-2026-98675 or the next vulnerability affects your stack