CVE-2026-98660
Received Received - Intake

Out-of-Bounds Access in Linux Kernel IIO Pressure BMP280 Driver

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup The sampling frequency tables store each frequency as an integer part and a fractional part in micro units. num_sampling_freq_avail is initialized to the number of flattened integer elements because read_avail() returns the table as a flat array. bmp280_write_sampling_frequency(), however, indexes the same table as a two-dimensional array and uses num_sampling_freq_avail as the number of rows. Convert the flattened element count back to the number of rows before iterating over the table.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-98660
EUVD
EUVD-2026-103914

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
Linux Linux 10b40ffba2f95cdeed47b731c5ad5ecc73e140e8
Linux Linux 10b40ffba2f95cdeed47b731c5ad5ecc73e140e8
Linux Linux 10b40ffba2f95cdeed47b731c5ad5ecc73e140e8
Linux Linux 10b40ffba2f95cdeed47b731c5ad5ecc73e140e8
Linux Linux 6.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an out-of-bounds access issue in the Linux kernel's IIO pressure sensor driver for the BMP280 device. The problem occurs in the sampling frequency lookup where a table is incorrectly indexed. The code initializes a counter based on flattened array elements but then uses it to index a two-dimensional array, leading to potential memory access outside valid bounds.

Detection Guidance

This vulnerability is specific to the Linux kernel's IIO pressure sensor driver (bmp280). Detection requires checking the kernel version and verifying if the affected driver is loaded. Use commands like 'uname -a' to check kernel version and 'lsmod | grep bmp280' to see if the driver is loaded.

Impact Analysis

This vulnerability could allow an attacker with local access to cause a denial of service or potentially execute arbitrary code in the kernel context. It may lead to system crashes or instability if exploited. Systems using the affected BMP280 pressure sensor driver are at risk.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for CVE-2026-98660. Monitor vendor advisories for kernel updates and apply them promptly. If immediate patching is not possible, consider disabling the bmp280 driver if not needed.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98660. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart