EUVD-2026-103932

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad4030: fix invalid oversamplingratio validation In ad4030setavgframelen, the logarithm is calculated before input validation. Passing zero or negative values leads to an undefined result from ilog2. Validate that the...

CVE-2026-98678 iio: adc: ad4030: fix invalid oversampling_ratio validation

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad4030: fix invalid oversamplingratio validation In ad4030setavgframelen, the logarithm is calculated before input validation. Passing zero or negative values leads to an undefined result from ilog2. Validate that the...

CVE-2026-98677 iio: adc: ad_sigma_delta: fix use-after-free on unbind

In the Linux kernel, the following vulnerability has been resolved: iio: adc: adsigmadelta: fix use-after-free on unbind adsdbufferpostenable allocates sigmadelta-samplesbuf with devmkrealloc at runtime, so its devres entry sits after all probe-time entries of the driver. devm resources are...

CVE-2026-98677

The Linux kernel contains a use-after-free vulnerability in the iio: adc: ad_sigma_delta driver. The root cause is that ad_sd_buffer_postenable() allocates sigma_delta->samples_buf using devm_krealloc() at runtime, causing its resources to be released during unbind before iio_device_unregister...

CVE-2026-98677 iio: adc: ad_sigma_delta: fix use-after-free on unbind

In the Linux kernel, the following vulnerability has been resolved: iio: adc: adsigmadelta: fix use-after-free on unbind adsdbufferpostenable allocates sigmadelta-samplesbuf with devmkrealloc at runtime, so its devres entry sits after all probe-time entries of the driver. devm resources are...

EUVD-2026-103931

In the Linux kernel, the following vulnerability has been resolved: iio: adc: adsigmadelta: fix use-after-free on unbind adsdbufferpostenable allocates sigmadelta-samplesbuf with devmkrealloc at runtime, so its devres entry sits after all probe-time entries of the driver. devm resources are...

CVE-2026-98676 iio: adc: ade9000: fix NULL pointer dereference in clkout registration

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ade9000: fix NULL pointer dereference in clkout registration ade9000setupclkout passes NULL as the register address when registering a divider clock. During clock registration, the common clock framework calls...

EUVD-2026-103930

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ade9000: fix NULL pointer dereference in clkout registration ade9000setupclkout passes NULL as the register address when registering a divider clock. During clock registration, the common clock framework calls...

CVE-2026-98676 iio: adc: ade9000: fix NULL pointer dereference in clkout registration

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ade9000: fix NULL pointer dereference in clkout registration ade9000setupclkout passes NULL as the register address when registering a divider clock. During clock registration, the common clock framework calls...

CVE-2026-98676

The Linux kernel contains a vulnerability in the iio: adc: ade9000 driver. The function ade9000_setup_clkout() incorrectly passes a NULL register address when registering a divider clock. During this process, the common clock framework calls clk_divider_recalc_rate(), which attempts to dereferenc...

CVE-2026-98675 iio: adc: ade9000: handle Phase C dip events in IRQ1 handler

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ade9000: handle Phase C dip events in IRQ1 handler ADE9000ST1CROSSINGDEPTH is the exclusive upper bound for scanning the STATUS1 event bits, so a value of 25 left out the highest event bit, ADE9000ST1DIPCBIT bit 25. Pha...

EUVD-2026-103929

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ade9000: handle Phase C dip events in IRQ1 handler ADE9000ST1CROSSINGDEPTH is the exclusive upper bound for scanning the STATUS1 event bits, so a value of 25 left out the highest event bit, ADE9000ST1DIPCBIT bit 25. Pha...

CVE-2026-98675

The Linux kernel contains a vulnerability in the iio: adc: ade9000 driver where Phase C dip events were not reported. The root cause is that ADE9000_ST1_CROSSING_DEPTH was set as an exclusive upper bound of 25, which excluded the highest event bit (ADE9000_ST1_DIPC_BIT , bit 25). The fix involves...

CVE-2026-98675 iio: adc: ade9000: handle Phase C dip events in IRQ1 handler

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ade9000: handle Phase C dip events in IRQ1 handler ADE9000ST1CROSSINGDEPTH is the exclusive upper bound for scanning the STATUS1 event bits, so a value of 25 left out the highest event bit, ADE9000ST1DIPCBIT bit 25. Pha...

CVE-2026-98674

The Linux kernel contains a vulnerability in the iio: adc: adi-axi-adc driver. The issue arises because the probe function fails to initialize the st->lock mutex, even though the AXI ADC register access paths rely on this mutex to serialize transactions. The vulnerability is addressed by initi...

CVE-2026-98674 iio: adc: adi-axi-adc: Initialize state mutex

In the Linux kernel, the following vulnerability has been resolved: iio: adc: adi-axi-adc: Initialize state mutex The AXI ADC register access paths serialize transactions with st-lock, but probe does not initialize it. Initialize the mutex before registering the backend...

EUVD-2026-103928

In the Linux kernel, the following vulnerability has been resolved: iio: adc: adi-axi-adc: Initialize state mutex The AXI ADC register access paths serialize transactions with st-lock, but probe does not initialize it. Initialize the mutex before registering the backend...

CVE-2026-98674 iio: adc: adi-axi-adc: Initialize state mutex

In the Linux kernel, the following vulnerability has been resolved: iio: adc: adi-axi-adc: Initialize state mutex The AXI ADC register access paths serialize transactions with st-lock, but probe does not initialize it. Initialize the mutex before registering the backend...

CVE-2026-98673 iio: adc: pac1934: check ACPI label duplication

In the Linux kernel, the following vulnerability has been resolved: iio: adc: pac1934: check ACPI label duplication A label duplication failure currently reaches the terminating-byte write. Release the ACPI result and abort before accessing the missing label; earlier labels are managed by devres...

CVE-2026-98673 iio: adc: pac1934: check ACPI label duplication

In the Linux kernel, the following vulnerability has been resolved: iio: adc: pac1934: check ACPI label duplication A label duplication failure currently reaches the terminating-byte write. Release the ACPI result and abort before accessing the missing label; earlier labels are managed by devres...