CVE-2026-63965

The Linux kernel contains a stack leak vulnerability in the bmp580 trigger handler (bmp580_trigger_handler()) located within the drivers/iio/pressure/bmp280-core.c file. The root cause is that the scan buffer is declared on the stack without an initializer, and a subsequent memcpy() operation fai...

CVE-2026-63935

A division by zero vulnerability exists in the Linux kernel 's nxp_sar_adc: nxp-sar-adc component within the iio/adc/nxp-sar-adc.c module. Specifically, the nxp_sar_adc_write_raw() function fails to validate the sampling frequency value before using it as a divisor. A local user providing a zero ...

PT-2026-61092

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds array access occurs in the veml6075 it ms index. The veml6075 it ms array contains 5 elements, but the VEML6075 CONF IT register can return values ranging from 0 to 7. I...

CVE-2025-38667

In the Linux kernel, the following vulnerability has been resolved: iio: fix potential out-of-bound write The buffer is set to 20 characters. If a caller write more characters, count is truncated to the max available space in "simplewritetobuffer". To protect from OoB access, check that the input...

CVE-2025-38133

CVE-2025-38133 affects the Linux kernel’s IIO ADC driver (ad4851/ad4858). The root cause was pointer arithmetic: ad4851_parse_channels_common() advances the channel pointer, and ad4858_parse_channels() advanced it again when setting ext_scan_type, causing indio_dev->channels to point past the ...