EUVD-2026-103927

In the Linux kernel, the following vulnerability has been resolved: iio: adc: pac1934: check ACPI label duplication A label duplication failure currently reaches the terminating-byte write. Release the ACPI result and abort before accessing the missing label; earlier labels are managed by devres...

CVE-2026-98672

The Linux kernel contains a vulnerability in the iio: adc: stm32-adc driver where processing data can lead to a division by zero error. This occurs if a conversion fails or returns zero, such as with the Vrefint channel . The issue was resolved by implementing checks to ensure converted values ar...

EUVD-2026-103926

In the Linux kernel, the following vulnerability has been resolved: iio: adc: stm32-adc: fix possible division by zero in processed channel In case the conversion has failed or returned zero, processing val can lead to a division by zero. Need to check for errors, or converted value is zero, befo...

CVE-2026-98672 iio: adc: stm32-adc: fix possible division by zero in processed channel

In the Linux kernel, the following vulnerability has been resolved: iio: adc: stm32-adc: fix possible division by zero in processed channel In case the conversion has failed or returned zero, processing val can lead to a division by zero. Need to check for errors, or converted value is zero, befo...

CVE-2026-98671 iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure

In the Linux kernel, the following vulnerability has been resolved: iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure If devmthermalofzoneregister fails, probe returns without unregistering the IIO map array or disabling runtime PM. Jump to errmap to release them...

CVE-2026-98671

The Linux kernel contains a vulnerability in the iio: adc: sun4i-gpadc-iio component. When the devm_thermal_of_zone_register() function fails, the probe process returns without unregistering the IIO map array or disabling runtime PM . This issue was resolved by ensuring the code jumps to err_map ...

EUVD-2026-103925

In the Linux kernel, the following vulnerability has been resolved: iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure If devmthermalofzoneregister fails, probe returns without unregistering the IIO map array or disabling runtime PM. Jump to errmap to release them...

CVE-2026-98670

The Linux kernel contains a vulnerability in the iio: adc: xilinx-xadc driver where the ZYNQ XADC alarm IRQ handler could re-arm zynq_unmask_work after the associated structure had been freed. This occurs because the IRQ was freed before the unmask worker was cancelled during unbind. The fix invo...

EUVD-2026-103924

In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind The ZYNQ XADC alarm IRQ handler queues zynqunmaskwork via scheduledelayedwork; that work is cleared by a devm callback. Register the devm callback befo...

CVE-2026-98670 iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind

In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind The ZYNQ XADC alarm IRQ handler queues zynqunmaskwork via scheduledelayedwork; that work is cleared by a devm callback. Register the devm callback befo...

CVE-2026-98669

The Linux kernel contains a vulnerability in the iio subsystem related to buffer-mode claims. Specifically, the iio_device_unregister() function disables and deactivates all buffers without acquiring the mlock lock. This lack of serialization allows the buffer state, such as the active_scan_mask ...

CVE-2026-98669 iio: buffer: serialize buffer teardown with mode claims

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: serialize buffer teardown with mode claims Buffer-mode claims hold mlock to guarantee that the device remains in buffer mode until the claim is released. Normal buffer updates take infoexistlock followed by mlock in...

EUVD-2026-103923

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: serialize buffer teardown with mode claims Buffer-mode claims hold mlock to guarantee that the device remains in buffer mode until the claim is released. Normal buffer updates take infoexistlock followed by mlock in...

CVE-2026-98668

The Linux kernel contains a vulnerability where the function iio_push_to_buffers_with_ts_unaligned() leaks uninitialized heap memory to userspace. This occurs when the data passed in is not a multiple of 8 bytes and the timestamp is enabled. The issue is resolved by specifying __GFP_ZERO for the ...

EUVD-2026-103922

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Ensure bounce buffer used for unaligned case is zeroed. iiopushtobufferswithtsunaligned leaks uninitialized heap memory to userspace if the data passed in is not a multiple of 8 bytes and the timestamp is enabled...

CVE-2026-98668 iio: buffer: Ensure bounce buffer used for unaligned case is zeroed.

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Ensure bounce buffer used for unaligned case is zeroed. iiopushtobufferswithtsunaligned leaks uninitialized heap memory to userspace if the data passed in is not a multiple of 8 bytes and the timestamp is enabled...

CVE-2026-98667

The Linux kernel contains a vulnerability in the iio: frequency: adf4377 driver where the clk_init_data and clk_parent_data structures are not fully initialized. Specifically, the adf4377_clk_register() function fails to initialize init.parent_names and several members of the clk_parent_data stru...

CVE-2026-98667 iio: frequency: adf4377: Fully initialize clk_init_data and clk_parent_data

In the Linux kernel, the following vulnerability has been resolved: iio: frequency: adf4377: Fully initialize clkinitdata and clkparentdata The clkinitdata structure contains several mutually-exclusive members for different methods to specify the possible parents of a clock, prompting drivers to...

EUVD-2026-103921

In the Linux kernel, the following vulnerability has been resolved: iio: frequency: adf4377: Fully initialize clkinitdata and clkparentdata The clkinitdata structure contains several mutually-exclusive members for different methods to specify the possible parents of a clock, prompting drivers to...

CVE-2026-98666

The Linux kernel contains a vulnerability in the iio: gyro: adis16136 driver. The serial_number file operations are open coded and fail to call debugfs_file_get(), which is required by debugfs_create_file_unsafe(). This issue allows debugfs_remove_recursive() to proceed without waiting for active...