CVE-2026-98675
Received Received - Intake

ADE9000 ADC Phase C Dip Event Handling Flaw

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ade9000: handle Phase C dip events in IRQ1 handler ADE9000_ST1_CROSSING_DEPTH is the exclusive upper bound for scanning the STATUS1 event bits, so a value of 25 left out the highest event bit, ADE9000_ST1_DIPC_BIT (bit 25). Phase C dip events were never reported. Bump the value to 26 so bit 25 is scanned.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-98675
EUVD
EUVD-2026-103929

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
Linux Linux 81de7b4619fc3682a3bedaa7e8d6b2d67ab4e10a
Linux Linux 81de7b4619fc3682a3bedaa7e8d6b2d67ab4e10a
Linux Linux 81de7b4619fc3682a3bedaa7e8d6b2d67ab4e10a
Linux Linux 6.18

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel affects the ADE9000 analog-to-digital converter driver. It involves a missing event bit in the STATUS1 register handling for Phase C dip events. The code incorrectly set the upper bound for scanning event bits to 25, which excluded the highest event bit (bit 25) responsible for Phase C dip events. This caused these events to never be reported.

Detection Guidance

This vulnerability is specific to the Linux kernel's IIO ADC driver for the ADE9000 device. Detection requires checking kernel logs for Phase C dip events not being reported due to the incorrect bit mask in the IRQ1 handler. Use dmesg or journalctl to inspect kernel logs for related errors.

Impact Analysis

If you use systems with the ADE9000 ADC and rely on accurate power monitoring or event detection, this vulnerability could lead to undetected Phase C dip events. This might cause incorrect power quality monitoring, missed fault conditions, or unreliable system behavior in applications like energy management or industrial control.

Mitigation Strategies

Apply the kernel patch that bumps the ADE9000_ST1_CROSSING_DEPTH value from 25 to 26 to include bit 25 in the STATUS1 event bit scanning. Update to a kernel version containing this fix.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98675. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart