CVE-2026-98672
Received Received - Intake

Linux Kernel Division by Zero in STM32 ADC Driver

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: iio: adc: stm32-adc: fix possible division by zero in processed channel In case the conversion has failed or returned zero, processing *val can lead to a division by zero. Need to check for errors, or converted value is zero, before processing the data. In case the converted value is zero, e.g. the Vrefint channel, this should be considered as invalid in all cases.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-98672
EUVD
EUVD-2026-103926

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
Linux Linux 0e346b2cfa855d6e6990dbdb220983fbf2bb0b92
Linux Linux 0e346b2cfa855d6e6990dbdb220983fbf2bb0b92
Linux Linux 0e346b2cfa855d6e6990dbdb220983fbf2bb0b92
Linux Linux 0e346b2cfa855d6e6990dbdb220983fbf2bb0b92
Linux Linux 5.16

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's STM32 ADC driver. It involves a possible division by zero when processing ADC channel data. If the conversion fails or returns zero, the driver attempts to divide by this value, leading to a crash or undefined behavior.

Detection Guidance

This vulnerability is specific to the Linux kernel's STM32 ADC driver and may not have direct network detection methods. Check kernel logs for division by zero errors or failures in ADC processing using commands like dmesg | grep -i "division by zero" or journalctl -k | grep -i "adc". Ensure the stm32-adc module is loaded and monitor for crashes in ADC-related processes.

Impact Analysis

This could cause system instability or crashes in systems using the STM32 ADC driver. It may lead to denial of service if the affected driver is used in critical applications like embedded systems or IoT devices.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for this vulnerability. If an immediate update is not possible, disable the affected STM32 ADC driver module (stm32-adc) if not in use. Monitor system logs for any signs of the issue and apply patches as soon as they are available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98672. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart