CVE-2026-98673

Received Received - Intake

IIO ADC PAC1934 Label Duplication Flaw

Publication date: 2026-10-18

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: iio: adc: pac1934: check ACPI label duplication A label duplication failure currently reaches the terminating-byte write. Release the ACPI result and abort before accessing the missing label; earlier labels are managed by devres. Detected by static analysis and reviewed with AI-assisted source auditing.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-18

Last Modified

2026-10-19

Generated

2026-10-19

AI Q&A

2026-10-18

EPSS Evaluated

N/A

NVD

CVE-2026-98673

EUVD

EUVD-2026-103927

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	0fb528c8255bd2de6a2fba26ed28d75a7f0cb630
Linux	Linux	0fb528c8255bd2de6a2fba26ed28d75a7f0cb630
Linux	Linux	0fb528c8255bd2de6a2fba26ed28d75a7f0cb630
Linux	Linux	0fb528c8255bd2de6a2fba26ed28d75a7f0cb630
Linux	Linux	6.9

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a flaw in the iio: adc: pac1934 driver where a label duplication issue causes a failure during ACPI processing. The problem occurs when the terminating-byte write is reached without proper label handling, leading to potential incorrect access or resource management.

Detection Guidance

This vulnerability is specific to the Linux kernel's IIO ADC PAC1934 driver and involves ACPI label duplication. Detection requires checking kernel logs for related errors or static analysis of the driver code. No direct network detection commands are applicable.

Impact Analysis

This vulnerability could allow incorrect handling of ACPI labels in the pac1934 ADC driver, potentially leading to system instability, resource leaks, or unexpected behavior in systems using this driver. It may affect systems with specific hardware configurations relying on the pac1934 ADC.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it is a low-level kernel driver issue in the IIO ADC subsystem. No evidence suggests it impacts data privacy, security controls, or regulatory requirements.

Mitigation Strategies

Apply the latest Linux kernel update that includes the fix for this issue. Monitor kernel logs for ACPI-related errors in the PAC1934 driver. If static analysis tools are used, update them to detect this specific issue.

Hi! I’m here to help you understand CVE-2026-98673. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70