CVE-2026-64497

A flaw was found in the Linux kernel's iio: chemical: scd30 driver, which manages a specific type of sensor. This vulnerability involves an error in how the driver processes numerical data, specifically a 'sign-extension bug' that can corrupt a part of a floating-point number called the exponent...

CVE-2026-63931

A flaw was found in the Linux kernel's iio: chemical: scd30 driver. A local user can trigger a denial of service DoS by writing a zero fractional part to the samplingfrequency sysfs attribute. This action leads to a division-by-zero error within the kernel, causing the system to crash...