CVE-2026-98676
Received Received - Intake

NULL Pointer Dereference in Linux Kernel IIO ADC ADE9000 Driver

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ade9000: fix NULL pointer dereference in clkout registration ade9000_setup_clkout() passes NULL as the register address when registering a divider clock. During clock registration, the common clock framework calls clk_divider_recalc_rate(), which dereferences the address through readl(). As a result, probing an ADE9000 configured as a clock provider with an external input clock crashes. CLKOUT passes CLKIN through without changing its rate. Register it as a 1:1 fixed-factor clock, which does not require register access. This change does not affect the configuration using the internal clock, for which the driver does not register a clock provider.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-98676
EUVD
EUVD-2026-103930

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
Linux Linux 81de7b4619fc3682a3bedaa7e8d6b2d67ab4e10a
Linux Linux 81de7b4619fc3682a3bedaa7e8d6b2d67ab4e10a
Linux Linux 81de7b4619fc3682a3bedaa7e8d6b2d67ab4e10a
Linux Linux 6.18

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a NULL pointer dereference in the Linux kernel's ADE9000 ADC driver. It occurs when the ade9000_setup_clkout() function incorrectly passes a NULL register address during clock registration. This causes a crash when probing an ADE9000 device configured as a clock provider with an external input clock, as the common clock framework attempts to read from the NULL address.

Detection Guidance

This vulnerability is specific to the Linux kernel's IIO ADC ADE9000 driver and involves a NULL pointer dereference during clock registration. Detection requires checking the kernel version and driver configuration for ADE9000 devices. No network detection commands are applicable.

Impact Analysis

If you use a system with an ADE9000 ADC configured as a clock provider using an external input clock, this vulnerability could cause the system to crash during probing. This may lead to denial of service or unexpected behavior in applications relying on the ADE9000 device.

Mitigation Strategies

Update the Linux kernel to a version containing the fix for this vulnerability. If using a custom kernel, apply the patch that changes the clock registration from a divider clock to a fixed-factor clock for ADE9000 devices.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98676. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart